Web Link Vulnerability in IBM Engineering Insights Product Line
CVE-2024-39727

9.8CRITICAL

Key Information:

Vendor

IBM
Status
Engineering Insights
Vendor
CVE Published:
25 December 2024

What is CVE-2024-39727?

IBM Engineering Lifecycle Optimization - Engineering Insights versions 7.0.2 and 7.0.3 contain a significant vulnerability resulting from the use of web links with untrusted references to external sites. A remote attacker can exploit this issue to expose sensitive information or execute unauthorized actions through the victim's web browser. Organizations utilizing these affected versions should assess their security posture and take appropriate measures to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Engineering Insights 7.0.2, 7.0.3

References

https://www.ibm.com/support/pages/node/7176783

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.