🤖 NVD update at 2025-01-25T16:46:37+0000

eslerm · Jan 25, 2025 · 865bee4 · 865bee4
1 parent d498321
commit 865bee4
Show file tree

Hide file tree

Showing 4 changed files with 224 additions and 0 deletions.
diff --git a/2024/CVE-2024-35144.json b/2024/CVE-2024-35144.json
@@ -0,0 +1,56 @@
+{
+    "id": "CVE-2024-35144",
+    "sourceIdentifier": "[email protected]",
+    "published": "2025-01-25T15:15:07.633",
+    "lastModified": "2025-01-25T15:15:07.633",
+    "vulnStatus": "Received",
+    "cveTags": [],
+    "descriptions": [
+        {
+            "lang": "en",
+            "value": "IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system."
+        }
+    ],
+    "metrics": {
+        "cvssMetricV31": [
+            {
+                "source": "[email protected]",
+                "type": "Primary",
+                "cvssData": {
+                    "version": "3.1",
+                    "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+                    "baseScore": 5.3,
+                    "baseSeverity": "MEDIUM",
+                    "attackVector": "NETWORK",
+                    "attackComplexity": "LOW",
+                    "privilegesRequired": "NONE",
+                    "userInteraction": "NONE",
+                    "scope": "UNCHANGED",
+                    "confidentialityImpact": "LOW",
+                    "integrityImpact": "NONE",
+                    "availabilityImpact": "NONE"
+                },
+                "exploitabilityScore": 3.9,
+                "impactScore": 1.4
+            }
+        ]
+    },
+    "weaknesses": [
+        {
+            "source": "[email protected]",
+            "type": "Primary",
+            "description": [
+                {
+                    "lang": "en",
+                    "value": "CWE-540"
+                }
+            ]
+        }
+    ],
+    "references": [
+        {
+            "url": "https://www.ibm.com/support/pages/node/7174953",
+            "source": "[email protected]"
+        }
+    ]
+}
diff --git a/2024/CVE-2024-35145.json b/2024/CVE-2024-35145.json
@@ -0,0 +1,56 @@
+{
+    "id": "CVE-2024-35145",
+    "sourceIdentifier": "[email protected]",
+    "published": "2025-01-25T15:15:08.440",
+    "lastModified": "2025-01-25T15:15:08.440",
+    "vulnStatus": "Received",
+    "cveTags": [],
+    "descriptions": [
+        {
+            "lang": "en",
+            "value": "IBM Maximo Application Suite 9.0.0 - Monitor Component is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
+        }
+    ],
+    "metrics": {
+        "cvssMetricV31": [
+            {
+                "source": "[email protected]",
+                "type": "Primary",
+                "cvssData": {
+                    "version": "3.1",
+                    "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+                    "baseScore": 6.1,
+                    "baseSeverity": "MEDIUM",
+                    "attackVector": "NETWORK",
+                    "attackComplexity": "LOW",
+                    "privilegesRequired": "NONE",
+                    "userInteraction": "REQUIRED",
+                    "scope": "CHANGED",
+                    "confidentialityImpact": "LOW",
+                    "integrityImpact": "LOW",
+                    "availabilityImpact": "NONE"
+                },
+                "exploitabilityScore": 2.8,
+                "impactScore": 2.7
+            }
+        ]
+    },
+    "weaknesses": [
+        {
+            "source": "[email protected]",
+            "type": "Primary",
+            "description": [
+                {
+                    "lang": "en",
+                    "value": "CWE-79"
+                }
+            ]
+        }
+    ],
+    "references": [
+        {
+            "url": "https://www.ibm.com/support/pages/node/7174956",
+            "source": "[email protected]"
+        }
+    ]
+}
diff --git a/2024/CVE-2024-35148.json b/2024/CVE-2024-35148.json
@@ -0,0 +1,56 @@
+{
+    "id": "CVE-2024-35148",
+    "sourceIdentifier": "[email protected]",
+    "published": "2025-01-25T15:15:08.613",
+    "lastModified": "2025-01-25T15:15:08.613",
+    "vulnStatus": "Received",
+    "cveTags": [],
+    "descriptions": [
+        {
+            "lang": "en",
+            "value": "IBM Maximo Application Suite 8.10.10, 8.11.7, and 9.0 - Monitor Component is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database."
+        }
+    ],
+    "metrics": {
+        "cvssMetricV31": [
+            {
+                "source": "[email protected]",
+                "type": "Primary",
+                "cvssData": {
+                    "version": "3.1",
+                    "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+                    "baseScore": 6.3,
+                    "baseSeverity": "MEDIUM",
+                    "attackVector": "NETWORK",
+                    "attackComplexity": "LOW",
+                    "privilegesRequired": "LOW",
+                    "userInteraction": "NONE",
+                    "scope": "UNCHANGED",
+                    "confidentialityImpact": "LOW",
+                    "integrityImpact": "LOW",
+                    "availabilityImpact": "LOW"
+                },
+                "exploitabilityScore": 2.8,
+                "impactScore": 3.4
+            }
+        ]
+    },
+    "weaknesses": [
+        {
+            "source": "[email protected]",
+            "type": "Primary",
+            "description": [
+                {
+                    "lang": "en",
+                    "value": "CWE-89"
+                }
+            ]
+        }
+    ],
+    "references": [
+        {
+            "url": "https://www.ibm.com/support/pages/node/7174952",
+            "source": "[email protected]"
+        }
+    ]
+}
diff --git a/2024/CVE-2024-35150.json b/2024/CVE-2024-35150.json
@@ -0,0 +1,56 @@
+{
+    "id": "CVE-2024-35150",
+    "sourceIdentifier": "[email protected]",
+    "published": "2025-01-25T15:15:08.770",
+    "lastModified": "2025-01-25T15:15:08.770",
+    "vulnStatus": "Received",
+    "cveTags": [],
+    "descriptions": [
+        {
+            "lang": "en",
+            "value": "IBM Maximo Application Suite 8.10.12, 8.11.0, 9.0.1, and 9.1.0 - Monitor Component does not neutralize output that is written to logs, which could allow an attacker to inject false log entries."
+        }
+    ],
+    "metrics": {
+        "cvssMetricV31": [
+            {
+                "source": "[email protected]",
+                "type": "Primary",
+                "cvssData": {
+                    "version": "3.1",
+                    "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+                    "baseScore": 5.3,
+                    "baseSeverity": "MEDIUM",
+                    "attackVector": "NETWORK",
+                    "attackComplexity": "LOW",
+                    "privilegesRequired": "NONE",
+                    "userInteraction": "NONE",
+                    "scope": "UNCHANGED",
+                    "confidentialityImpact": "NONE",
+                    "integrityImpact": "LOW",
+                    "availabilityImpact": "NONE"
+                },
+                "exploitabilityScore": 3.9,
+                "impactScore": 1.4
+            }
+        ]
+    },
+    "weaknesses": [
+        {
+            "source": "[email protected]",
+            "type": "Primary",
+            "description": [
+                {
+                    "lang": "en",
+                    "value": "CWE-117"
+                }
+            ]
+        }
+    ],
+    "references": [
+        {
+            "url": "https://www.ibm.com/support/pages/node/7180057",
+            "source": "[email protected]"
+        }
+    ]
+}