CVE-2024-47113

Published Jan 18, 2025

Last updated a month ago

Overview

Description: IBM ICP - Voice Gateway 1.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5, 1.0.6. 1.0.7, 1.0.7.1, and 1.0.8 could allow remote attacker to send specially crafted XML statements, which would allow them to attacker to view or modify information in the XML document.
Source: psirt@us.ibm.com
NVD status: Received

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.1
Impact score: 5.2
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Severity: HIGH

Weaknesses

psirt@us.ibm.com: CWE-91

Hype score: Not currently trending

New post from https://t.co/uXvPWJy6tj (CVE-2024-47113 | IBM Voice Gateway up to 1.0.8 XML xml injection) has been published on https://t.co/b3s9tkIGf1
@WolfgangSesin
18 Jan 2025
23 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

References