HTML Injection Vulnerability in IBM Informix Dynamic Server

CVE-2024-49343

What is CVE-2024-49343?

IBM Informix Dynamic Server versions 12.10 and 14.10 are susceptible to an HTML injection vulnerability. This flaw allows a remote attacker to inject malicious HTML code into the application. When a user accesses the compromised content, the injected code may be executed within the victim's web browser, running under the security context of the hosting site. This presents a significant risk as it can lead to unauthorized actions or data exposure on the affected system.

References