CVE-2024-45076

CRITICAL

IBM webMethods Integration 10.15 - Code Injection

Title source: llm
STIX 2.1

Description

IBM webMethods Integration 10.15 could allow an authenticated user to upload and execute arbitrary files which could be executed on the underlying operating system.

References (1)

Core 1
Core References

Scores

CVSS v3 9.9
EPSS 0.0019
EPSS Percentile 40.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-434
Status published
Products (1)
ibm/webmethods_integration 10.15
Published Sep 04, 2024
Tracked Since Feb 18, 2026