6.5
Moyenne
CVE-2024-45074 IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system
Description
IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| webMethods Integration | 10.15 | Pas de correctif indiqué |
Autres CVE de webMethods Integration
Les 6 CVE de webMethods Integration →
CVE-2025-36072
IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through…
8.8
Élevée
CVE-2025-36037
IBM webMethods Integration 10.15 and 11.1
is vulnerable to server-side request forgery (SSRF)
5.4
Moyenne
CVE-2025-36202
IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute…
7.5
Élevée
CVE-2024-45075
IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to…
8.8
Élevée