CVE-2024-45076

CRITICAL

IBM webMethods Integration 10.15 - Code Injection

Title source: llm
STIX 2.1

Description

IBM webMethods Integration 10.15 could allow an authenticated user to upload and execute arbitrary files which could be executed on the underlying operating system.

References (1)

Core 1
Core References

Scores

CVSS v3 9.9
EPSS 0.0055
EPSS Percentile 41.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-434
Status published
Products (1)
ibm/webmethods_integration 10.15
Published Sep 04, 2024
Tracked Since Feb 18, 2026