| CVE-2024-9802 |
The conformance validation endpoint is public so everybody can verify the conformance of onboarded services
|
5.3
Moyenne
|
10 oct. 2024 |
| CVE-2024-9798 |
The health endpoint is public so everybody can see a list of all services
|
5.3
Moyenne
|
10 oct. 2024 |
| CVE-2024-6834 |
A vulnerability in APIML Spring Cloud Gateway which leverages user privileges by unexpected signing proxied request by…
|
9.0
Critique
|
17 juil. 2024 |
| CVE-2024-6833 |
A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a…
|
5.9
Moyenne
|
17 juil. 2024 |
| CVE-2021-4326 |
A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands…
|
3.3
Faible
|
22 févr. 2023 |
| CVE-2021-4314 |
It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT…
|
5.3
Moyenne
|
18 janv. 2023 |