deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-3063
Published: 2025-04-02
Description: The Shopper Approved Reviews plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajax_callback_update_sa_option() function in versions 2.0 to 2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/shopperapproved-reviews/trunk/shopperapproved.php#L154; https://www.wordfence.com/threat-intel/vulnerabilities/id/c042b347-2884-436d-abd3-6931548f18d6?source=cve
CVE: CVE-2025-3097
Published: 2025-04-02
Description: The wp Time Machine plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.0. This is due to missing or incorrect nonce validation on the 'wpTimeMachineCore.php' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-time-machine/trunk/includes/wpTimeMachineCore.php#L86; https://wordpress.org/plugins/wp-time-machine/; https://www.wordfence.com/threat-intel/vulnerabilities/id/f44fdbb2-abb8-488f-bdc0-ec6eea93d92a?source=cve
CVE: CVE-2025-3098
Published: 2025-04-02
Description: The Video Url plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.0.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/video-sidebar-widget/tags/1.0.0.3/delete.php; https://plugins.trac.wordpress.org/browser/video-sidebar-widget/tags/1.0.0.3/video_edit.php; https://wordpress.org/plugins/video-sidebar-widget/
CVE: CVE-2025-3099
Published: 2025-04-02
Description: The Advanced Search by My Solr Server plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5. This is due to missing or incorrect nonce validation on the 'MySolrServerSettings' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/advanced-search-by-my-solr-server/tags/2.0.5/advanced-search-by-my-solr-server-options-page.php#L76; https://plugins.trac.wordpress.org/browser/advanced-search-by-my-solr-server/tags/2.0.5/advanced-search-by-my-solr-server.inc.php#L66; https://plugins.trac.wordpress.org/browser/advanced-search-by-my-solr-server/tags/2.0.5/advanced-search-by-my-solr-server.php#L1008
CVE: CVE-2025-2786
Published: 2025-04-02
Description: A flaw was found in Tempo Operator, where it creates a ServiceAccount, ClusterRole, and ClusterRoleBinding when a user deploys a TempoStack or TempoMonolithic instance. This flaw allows a user with full access to their namespace to extract the ServiceAccount token and use it to submit TokenReview and SubjectAccessReview requests, potentially revealing information about other users' permissions. While this does not allow privilege escalation or impersonation, it exposes information that could aid in gathering information for further attacks.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/errata/RHSA-2025:3607; https://access.redhat.com/errata/RHSA-2025:3740; https://access.redhat.com/security/cve/CVE-2025-2786
CVE: CVE-2025-2842
Published: 2025-04-02
Description: A flaw was found in the Tempo Operator. When the Jaeger UI Monitor Tab functionality is enabled in a Tempo instance managed by the Tempo Operator, the Operator creates a ClusterRoleBinding for the Service Account of the Tempo instance to grant the cluster-monitoring-view ClusterRole.
This can be exploited if a user has 'create' permissions on TempoStack and 'get' permissions on Secret in a namespace (for example, a user has ClusterAdmin permissions for a specific namespace), as the user can read the token of the Tempo service account and therefore has access to see all cluster metrics.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/errata/RHSA-2025:3607; https://access.redhat.com/errata/RHSA-2025:3740; https://access.redhat.com/security/cve/CVE-2025-2842
CVE: CVE-2025-1805
Published: 2025-04-02
Description: Crypt::Salt for Perl version 0.01 uses insecure rand() function when generating salts for cryptographic purposes.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-338
References: https://metacpan.org/release/HACHI/Crypt-Salt-0.01/source/lib/Crypt/Salt.pm#L76; https://perldoc.perl.org/functions/rand; https://security.metacpan.org/docs/guides/random-data-for-security.html
CVE: CVE-2025-21987
Published: 2025-04-02
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: init return value in amdgpu_ttm_clear_buffer

Otherwise an uninitialized value can be returned if
amdgpu_res_cleared returns true for all regions.

Possibly closes: https://gitlab.freedesktop.org/drm/amd/-/issues/3812

(cherry picked from commit 7c62aacc3b452f73a1284198c81551035fac6d71)
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://git.kernel.org/stable/c/5bd98c2df4a0f2e2dcbdf563feb8d348406377b5; https://git.kernel.org/stable/c/d2c9625b0ade41f9917875d88173a0cc802b95fc; https://git.kernel.org/stable/c/d3c7059b6a8600fc62cd863f1ea203b8675e63e1
CVE: CVE-2025-21988
Published: 2025-04-02
Description: In the Linux kernel, the following vulnerability has been resolved:

fs/netfs/read_collect: add to next->prev_donated

If multiple subrequests donate data to the same "next" request
(depending on the subrequest completion order), each of them would
overwrite the `prev_donated` field, causing data corruption and a
BUG() crash ("Can't donate prior to front").
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/62b9ad7e52d4777f7e775ee1f0ad2452f6041024; https://git.kernel.org/stable/c/e25cec3b76aba47a49138d2162fc809c6cd49c9e; https://git.kernel.org/stable/c/e2d46f2ec[PII_REDACTED]17b[PII_REDACTED]3f602121
CVE: CVE-2025-21989
Published: 2025-04-02
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: fix missing .is_two_pixels_per_container

Starting from 6.11, AMDGPU driver, while being loaded with amdgpu.dc=1,
due to lack of .is_two_pixels_per_container function in dce60_tg_funcs,
causes a NULL pointer dereference on PCs with old GPUs, such as R9 280X.

So this fix adds missing .is_two_pixels_per_container to dce60_tg_funcs.

(cherry picked from commit bd4b125eb949785c6f8a53b0494e[PII_REDACTED]9d)
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://git.kernel.org/stable/c/36d04c9313d8d83ead92242f037099ac73e02120; https://git.kernel.org/stable/c/e204aab79e01bc8ff[PII_REDACTED]93ed8b719de57; https://git.kernel.org/stable/c/fefa811e616b5d0b555ed65743e528a0a8a0b377
CVE: CVE-2025-21990
Published: 2025-04-02
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags

PRT BOs may not have any backing store, so bo->tbo.resource will be
NULL. Check for that before dereferencing.

(cherry picked from commit 3e3fcd29b505cebed659311337ea03b7698767fc)
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://git.kernel.org/stable/c/6cc30748e17ea2a64051ceaf83a8372484e597f1; https://git.kernel.org/stable/c/72235808eabea93055b459a63443bd9cd6b08aa4; https://git.kernel.org/stable/c/af23e39b9e9280b1f6299b6f2fa090a1694240ad
CVE: CVE-2025-21991
Published: 2025-04-02
Description: In the Linux kernel, the following vulnerability has been resolved:

x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes

Currently, load_microcode_amd() iterates over all NUMA nodes, retrieves their
CPU masks and unconditionally accesses per-CPU data for the first CPU of each
mask.

According to Documentation/admin-guide/mm/numaperf.rst:

  "Some memory may share the same node as a CPU, and others are provided as
  memory only nodes."

Therefore, some node CPU masks may be empty and wouldn't have a "first CPU".

On a machine with far memory (and therefore CPU-less NUMA nodes):
- cpumask_of_node(nid) is 0
- cpumask_first(0) is CONFIG_NR_CPUS
- cpu_data(CONFIG_NR_CPUS) accesses the cpu_info per-CPU array at an
  index that is 1 out of bounds

This does not have any security implications since flashing microcode is
a privileged operation but I believe this has reliability implications by
potentially corrupting memory while flashing a microcode update.

When booting with CONFIG_UBSAN_BOUNDS=y on an AMD machine that flashes
a microcode update. I get the following splat:

  UBSAN: array-index-out-of-bounds in arch/x86/kernel/cpu/microcode/amd.c:X:Y
  index 512 is out of range for type 'unsigned long[512]'
  [...]
  Call Trace:
   dump_stack
   __ubsan_handle_out_of_bounds
   load_microcode_amd
   request_microcode_amd
   reload_store
   kernfs_fop_write_iter
   vfs_write
   ksys_write
   do_syscall_64
   entry_SYSCALL_64_after_hwframe

Change the loop to go over only NUMA nodes which have CPUs before determining
whether the first CPU on the respective node needs microcode update.

  [ bp: Massage commit message, fix typo. ]
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-129
References: https://git.kernel.org/stable/c/18b5d857c6496b78ead2fd10001b81ae32d30cac; https://git.kernel.org/stable/c/488ffc0cac38f203979f83634236ee53251ce593; https://git.kernel.org/stable/c/5ac295dfccb5b015493f86694fa13a0dde4d3665
CVE: CVE-2025-21992
Published: 2025-04-02
Description: In the Linux kernel, the following vulnerability has been resolved:

HID: ignore non-functional sensor in HP 5MP Camera

The HP 5MP Camera (USB ID 0408:5473) reports a HID sensor interface that
is not actually implemented. Attempting to access this non-functional
sensor via iio_info causes system hangs as runtime PM tries to wake up
an unresponsive sensor.

  [453] hid-sensor-hub 0003:0408:5473.0003: Report latency attributes: ffffffff:ffffffff
  [453] hid-sensor-hub 0003:0408:5473.0003: common attributes: 5:1, 2:1, 3:1 ffffffff:ffffffff

Add this device to the HID ignore list since the sensor interface is
non-functional by design and should not be exposed to userspace.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/363236d709e75610b628c2a4337ccbe42e454b6d; https://git.kernel.org/stable/c/6ca3d4d87af406a390a34ea924ab65c517e6e132; https://git.kernel.org/stable/c/7a7ada33879a631b05b536e66d1c5b1219d3bade
CVE: CVE-2025-21993
Published: 2025-04-02
Description: In the Linux kernel, the following vulnerability has been resolved:

iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()

When performing an iSCSI boot using IPv6, iscsistart still reads the
/sys/firmware/ibft/ethernetX/subnet-mask entry. Since the IPv6 prefix
length is 64, this causes the shift exponent to become negative,
triggering a UBSAN warning. As the concept of a subnet mask does not
apply to IPv6, the value is set to ~0 to suppress the warning message.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://git.kernel.org/stable/c/07e0d99a2f701123ad3104c0f1a1e66bce74d6e5; https://git.kernel.org/stable/c/2d1eef248107bdf3d5a69d0fde04c30a79a7bf5d; https://git.kernel.org/stable/c/9bfa80c8aa4e06dff55a953c3fffbfc68a3a3b1c
CVE: CVE-2025-27556
Published: 2025-04-02
Description: An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.set_language are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-770
References: https://docs.djangoproject.com/en/dev/releases/security/; https://groups.google.com/g/django-announce; https://www.djangoproject.com/weblog/2025/apr/02/security-releases/
CVE: CVE-2025-30090
Published: 2025-04-02
Description: mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishandled after $encoded has been set to true.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://squirrelmail.org; https://squirrelmail.org/security/issue.php?d=2025-04-02
CVE: CVE-2024-45064
Published: 2025-04-02
Description: A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted set of network packets can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 8.5 (HIGH)
CWE: CWE-119
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2096; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2096
CVE: CVE-2024-50384
Published: 2025-04-02
Description: A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects X-CUBE-AZRTOS-F7 NetX Duo Web Component HTTP server v 1.1.0. This HTTP server implementation is contained in this file - x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nx_web_http_server.c
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-459
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2097; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2097
CVE: CVE-2024-50385
Published: 2025-04-02
Description: A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects X-CUBE-AZRTOS-F7 NetX Duo Component HTTP Server HTTP server v 1.1.0. This HTTP server implementation is contained in this file - x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-459
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2097; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2097
CVE: CVE-2024-50594
Published: 2025-04-02
Description: An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.This vulnerability affects the NetX Duo Web Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nx_web_http_server.c
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-191
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2102; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2102
CVE: CVE-2024-50595
Published: 2025-04-02
Description: An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.This vulnerability affects the NetX Duo Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-191
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2102; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2102
CVE: CVE-2024-50596
Published: 2025-04-02
Description: An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects the NetX Duo Web Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nx_web_http_server.c
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-191
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2103; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2103
CVE: CVE-2024-50597
Published: 2025-04-02
Description: An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects the NetX Duo Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-191
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2103; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2103
CVE: CVE-2025-21994
Published: 2025-04-02
Description: In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix incorrect validation for num_aces field of smb_acl

parse_dcal() validate num_aces to allocate posix_ace_state_array.

if (num_aces > ULONG_MAX / sizeof(struct smb_ace *))

It is an incorrect validation that we can create an array of size ULONG_MAX.
smb_acl has ->size field to calculate actual number of aces in request buffer
size. Use this to check invalid num_aces.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/1b8b67f3c5e5169535e26efedd3e422172e2db64; https://git.kernel.org/stable/c/9c4e202abff45f8eac17989e549fc7a75095f675; https://git.kernel.org/stable/c/a4cb17797a5d241f1e509cb5b46ed95a80c2f5fd
CVE: CVE-2024-25051
Published: 2025-04-02
Description: IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-613
References: https://www.ibm.com/support/pages/node/7229760
CVE: CVE-2024-56341
Published: 2025-04-02
Description: IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7229839
CVE: CVE-2025-31720
Published: 2025-04-02
Description: A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Extended Read permission to copy an agent, gaining access to its configuration.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3512
CVE: CVE-2025-31721
Published: 2025-04-02
Description: A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gaining access to encrypted secrets in its configuration.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3513
CVE: CVE-2025-31722
Published: 2025-04-02
Description: In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3505
CVE: CVE-2025-31723
Published: 2025-04-02
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Simple Queue Plugin 1.4.6 and earlier allows attackers to change and reset the build queue order.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3469
CVE: CVE-2025-31724
Published: 2025-04-02
Description: Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-256
References: https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3537
CVE: CVE-2025-31725
Published: 2025-04-02
Description: Jenkins monitor-remote-job Plugin 1.0 stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3539
CVE: CVE-2025-31726
Published: 2025-04-02
Description: Jenkins Stack Hammer Plugin 1.0.6 and earlier stores Stack Hammer API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3520
CVE: CVE-2025-31727
Published: 2025-04-02
Description: Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-549
References: https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3523
CVE: CVE-2025-31728
Published: 2025-04-02
Description: Jenkins AsakusaSatellite Plugin 0.1.1 and earlier does not mask AsakusaSatellite API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-549
References: https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3523
CVE: CVE-2024-56474
Published: 2025-04-02
Description: IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://www.ibm.com/support/pages/node/7229880
CVE: CVE-2024-56475
Published: 2025-04-02
Description: IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7229880
CVE: CVE-2024-56476
Published: 2025-04-02
Description: IBM TXSeries for Multiplatforms 9.1 and 11.1 could allow an attacker to enumerate usernames due to an observable login attempt response discrepancy.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204
References: https://www.ibm.com/support/pages/node/7229880