5.9
Medium
CVE-2024-49797 IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable…
Description
IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ApplinX | 11.1 | No fix stated |
Other CVEs of ApplinX
The 15 CVEs of ApplinX →
CVE-2025-36419
IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks…
5.3
Medium
CVE-2025-36418
IBM ApplinX 11.1 is vulnerable due to a privilege escalation vulnerability due to improper verification of JWT tokens
7.3
High
CVE-2025-36411
IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and…
3.5
Low
CVE-2025-36410
IBM ApplinX 11.1 could allow an authenticated user to perform unauthorized administrative actions on the server due to…
3.1
Low