WID-SEC-W-2024-1802

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

IBM Business Automation Workflow: Mehrere Schwachstellen

view advisory published 2024-08-08

Ein entfernter Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um Informationen offenzulegen oder beliebigen Code auszuführen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2024-6345US——
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to…
CVE-2024-39689UShigh7.5OT elevatedExploit
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30…
CVE-2024-37891USmedium6.5—
urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured…
CVE-2024-5206USmedium4.7—
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0.…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan