| CVE-2024-9802 |
The conformance validation endpoint is public so everybody can verify the conformance of onboarded services
|
5.3
Medium
|
Oct 10, 2024 |
| CVE-2024-9798 |
The health endpoint is public so everybody can see a list of all services
|
5.3
Medium
|
Oct 10, 2024 |
| CVE-2024-6834 |
A vulnerability in APIML Spring Cloud Gateway which leverages user privileges by unexpected signing proxied request by…
|
9.0
Critical
|
Jul 17, 2024 |
| CVE-2024-6833 |
A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a…
|
5.9
Medium
|
Jul 17, 2024 |
| CVE-2021-4326 |
A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands…
|
3.3
Low
|
Feb 22, 2023 |
| CVE-2021-4314 |
It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT…
|
5.3
Medium
|
Jan 18, 2023 |