Most severe exploited vulnerabilities for "ibm cognos analytics"

Where

AND

Sort:

Versions

11.2.0-11.2.4 fp4

12.0.0-12.0.3

composer/magento/community-editionAdobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability

Risk 99

Severity

9.8

Exploited

XEE

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.

1 / 3

Source: CISA

First published (updated )

CVE-2024-34102

redhat/firefoxStored XSS via PDFjs

Risk 73

Severity

8.8

Exploited

EPSS

0.04%

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact If pdf.js is used to load a malicious PDF, and PDF.js is configured with isEvalSupported set to true (which is the default value), unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain.

Patches The patch removes the use of eval: https://github.com/mozilla/pdf.js/pull/18015

Workarounds Set the option isEvalSupported to false.

References https://bugzilla.mozilla.org/showbug.cgi?id=1893645

1 / 6

Source: GitHub

First published (updated )

CVE-2024-4367

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.