CVE-2024-28787
High
Description
IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote attacker to obtain highly sensitive private information or cause a denial of service using a specially crafted HTTP request. IBM X-Force ID: 286584.
SeverityHigh
CVSS8.7
Exploit probability—
Product
Ibm Application Gateway
PublishedApr 4, 2024
First seenApr 4, 2024
Weakness typeCWE-650CWE-650
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm application_gateway | 20.01 ≤ v ≤ 24.03 | — |
| ibm security_verify_access | 10.0.0 ≤ v ≤ 10.0.7 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.