CVE-2024-6923

mediumpriority · track · 0EPSS 0.011 · 65 %ileDEEUNLRUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.10% (65th) EPSS

CVSS 5.5 · medium

Is it mine?

145 products

Check your exposure

Who says so?

8 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-27

There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedRUGGEDCOM ROX MX5000siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX MX5000REsiemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1400siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1500siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1501siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1510siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1511siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1512siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1524siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1536siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX5000siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-32bit-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-32bit-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-32bit-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-devhelp-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-devhelp-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-devhelp-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-devhelp-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-testsuite-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-testsuite-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-testsuite-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-testsuite-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.1–7.5

v3.15.5mediumAV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:Lsecondary · FSTEC (BDU) RU

v3.15.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:Lsecondary · ENISA EU

v3.15.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:Lsecondaryexploitability 2.1 · impact 3.4

v3.15.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:Lsecondary · Siemens ProductCERT DE

v3.15.1mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:Usecondary · CVSS-BT (t0sche)

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · SUSE Product Security

v3.16.8mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Nsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: poc · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-502USCWE-94USCWE-94USCWE-94US

affected products (145)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Atlassian Bitbucket <10.0.2all versionscert_bundDE
Atlassian Bitbucket <8.19.25 (LTS)all versionscert_bundDE
Atlassian Bitbucket <9.4.13 (LTS)all versionscert_bundDE
Atlassian Jira <10.3.8 (LTS)all versionscert_bundDE
Atlassian Jira <10.7.2all versionscert_bundDE
Atlassian Jira <9.12.25 (LTS)all versionscert_bundDE
Broadcom Brocade SANnavall versionscert_bundDEcpe:/a:broadcom:brocade_sannav:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Dell PowerProtect Data Domain <7.10.1.70all versionscert_bundDE
Dell PowerProtect Data Domain <7.13.1.40all versionscert_bundDE
Dell PowerProtect Data Domain <8.3.1.10all versionscert_bundDE
Dell PowerProtect Data Domain <8.4.0.0all versionscert_bundDE
Dell PowerScale OneFS OneFS <9.5.1.2all versionscert_bundDE
Fedora Linuxall versionscert_bundDEcpe:/o:fedoraproject:fedora:-
Gentoo Linuxall versionscert_bundDEcpe:/o:gentoo:linux:-
IBM SPSSall versionscert_bundDEcpe:/a:ibm:spss:modeler
NetApp ActiveIQ Unified Manager for Microsoft Windowsall versionscert_bundDEcpe:/a:netapp:active_iq_unified_manager:for_microsoft_windows
NetApp ActiveIQ Unified Manager for VMware vSphereall versionscert_bundDEcpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere
NetApp Data ONTAP 9all versionscert_bundDEcpe:/a:netapp:data_ontap:9

showing 20 of 145

advisories (10)

Vendor and ecosystem advisories describing this.

NCSC-2025-0020Kwetsbaarheden verholpen in Oracle Database productenNL2025-01-22csaf · ncsc_nlNL
Oracle heeft kwetsbaarheden verholpen in diverse database producten en subsystemen, zoals de Core Database, Graal, Application Express, GoldenGate en REST data.
NCSC-2025-0382Kwetsbaarheden verholpen in Siemens productenNL2025-12-09csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.
SSA-202008SSA-202008: Multiple Vulnerabilities in Ruggedcom Rox Before V2.17.02025-12-09csaf · siemens_psirtDE
Ruggedcom ROX familly contain multiple vulnerabilities before V2.17.0 Siemens has released new versions for the affected products and recommends to update to the latest versions.
SUSE-SU-2024:2982-1Security update for python3112024-08-20csaf · suse_csafDE
Security update for python311
WID-SEC-W-2024-2033Red Hat Enterprise Linux (CPython): Schwachstelle ermöglicht Manipulation von DateienDeutsch2024-09-02csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren.
WID-SEC-W-2025-0647Splunk Splunk Enterprise: Mehrere SchwachstellenDeutsch2025-03-26csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben, Daten zu manipulieren, Code auszuführen, einen Denial-of-Service-Zustand zu verursachen und weitere, nicht spezifizierte Auswirkungen zu verursachen.
BIT-libpython-2024-6923Email header injection due to unquoted newlines2025-08-11vendor · osvUS
There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.
BIT-python-2024-6923Email header injection due to unquoted newlines2024-08-19vendor · osvUS
There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.
BIT-python-min-2024-6923Email header injection due to unquoted newlines2025-01-17vendor · osvUS
There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.
PSF-2024-82024-08-01vendor · osvUS
There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

also known as (8)

Other names and identifiers for this entity.

CNNVD-202408-046 cnnvd
EUVD-2024-48020 enisa_euvd
BDU:2025-12325 fstec_bdu
GHSA-87qc-q3w7-7m8w enisa_euvd
BIT-libpython-2024-6923osv
BIT-python-2024-6923osv
BIT-python-min-2024-6923osv
PSF-2024-8osv

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund ncsc_nl siemens_psirt suse_csaf NVD CVE.org MITRE

published 2024-08-01modified 2026-06-17

references (30)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan