Entirex (Ibm) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2025-02-27. Vendor: Ibm.
CVEs of Entirex
- CVE-2025-0759 - CVSS 3.3 (low), 2025-02-27: IBM EntireX 11.1 could allow a local user to unintentionally modify data timestamp integrity due to improper shared resource synchronization.
- CVE-2024-56812 - CVSS 5.5 (medium), 2025-02-27: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used…
- CVE-2024-56811 - CVSS 3.3 (low), 2025-02-27: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used…
- CVE-2024-54169 - CVSS 6.5 (medium), 2025-02-27: IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request…
- CVE-2024-56494 - CVSS 3.3 (low), 2025-02-27: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used…
- CVE-2024-56810 - CVSS 3.3 (low), 2025-02-27: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used…
- CVE-2024-56493 - CVSS 3.3 (low), 2025-02-27: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used…
- CVE-2024-56496 - CVSS 3.3 (low), 2025-02-27: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used…
- CVE-2024-54170 - CVSS 5.5 (medium), 2025-02-27: IBM EntireX 11.1 could allow a local user to cause a denial of service due to use of a regular expression with an inefficient complexity that consumes…
- CVE-2024-56495 - CVSS 3.3 (low), 2025-02-27: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used…
- CVE-2025-0158 - CVSS 5.5 (medium), 2025-02-06: IBM EntireX 11.1 could allow a local user to cause a denial of service due to an unhandled error and fault isolation.
- CVE-2024-56467 - CVSS 3.3 (low), 2025-02-06: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used…
- CVE-2024-54171 - CVSS 7.1 (high), 2025-02-06: IBM EntireX 11.1 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. An authenticated attacker could exploit this…
