Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-6pu8-7mxt-d7d4

Summary IBM webMethods Integration 10.15 could allow an authenticated user to upload and execute arbitrary files which could be executed on the underlying operating system.

Aliases

alias	CVE-2024-45076

Fixed_packages

Affected_packages

References

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2024-45076

reference_id

reference_type

scores

value	0.00192
scoring_system	epss
scoring_elements	0.40979
published_at	2026-06-06T12:55:00Z

value	0.00192
scoring_system	epss
scoring_elements	0.40916
published_at	2026-06-08T12:55:00Z

value	0.00192
scoring_system	epss
scoring_elements	0.40928
published_at	2026-06-09T12:55:00Z

value	0.00192
scoring_system	epss
scoring_elements	0.40975
published_at	2026-06-05T12:55:00Z

value	0.00192
scoring_system	epss
scoring_elements	0.40947
published_at	2026-06-07T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2024-45076

reference_url

https://www.ibm.com/support/pages/node/7167245

reference_id

7167245

reference_type

scores

value	9.9
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-04T18:29:29Z/

url

https://www.ibm.com/support/pages/node/7167245

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:softwareag:webmethods:10.15:::::::*
reference_id	cpe:2.3:a:softwareag:webmethods:10.15:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:softwareag:webmethods:10.15:::::::*

Weaknesses

cwe_id	434
name	Unrestricted Upload of File with Dangerous Type
description	The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.

Exploits

Severity_range_score 9.9 - 9.9

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6pu8-7mxt-d7d4

Vulnerability Instance