CVE-2024-51463
Last modified
CVE-2024-51463 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.. EPSS estimates a 0.85% chance of exploitation in the next 30 days.
Description
IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | I | 7.3 |
| Ibm | I | 7.4 |
| Ibm | I | 7.5 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-51463?
How severe is CVE-2024-51463?
How do I fix CVE-2024-51463?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-51457IBM Robotic Process Automation for Cloud Pak 21.0.0 through …5.4
- CVE-2024-51459IBM InfoSphere Information Server 11.7 could allow a local u…7.8
- CVE-2024-5146Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2024-51460IBM InfoSphere Information Server 11.7 could allow an authen…4.3
- CVE-2024-51461IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow…6.5
- CVE-2024-51462IBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could all…5.3
- CVE-2024-51464IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator…4.3
- CVE-2024-51465IBM App Connect Enterprise Certified Container 11.4, 11.5, 1…8.8
- CVE-2024-51466IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 …9
- CVE-2024-5147The WPZOOM Addons for Elementor (Templates, Widgets) plugin …9.8
- CVE-2024-51470IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, I…6.5
- CVE-2024-51471IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console co…5.3
Are you affected by CVE-2024-51463?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST