Aller au contenu
Se connecter
6.5 Moyenne

CVE-2024-28764 IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection

Description

IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection. An attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 285623.

Produits et versions touchés

Produit Versions touchées Corrigé en
WebSphere Automation 1.7.0 Pas de correctif indiqué
websphere_automation_for_ibm_cloud_pak_for_watson_aiops 1.7.0 Pas de correctif indiqué

Autres CVE de WebSphere Automation

Les 3 CVE de WebSphere Automation →
CVE-2024-54181 IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to… 7.2 Élevée CVE-2024-28775 IBM WebSphere Automation 1.7.0 is vulnerable to cross-site scripting 4.4 Moyenne
Suivre cette CVE