| Reporter | Title | Published | Views | Family All 17 |
|---|---|---|---|---|
 | Docker based datastores for IBM Instana 241-2 243-0 - No Authentication Exploit | 7 Apr 202300:00 | – | zdt |
 | Security Bulletin: Docker based datastores for IBM Instana do not currently require authentication | 26 Apr 202316:24 | – | ibm |
 | The vulnerability of the data storage system based on Docker for APM monitoring in IBM Instana Observability allows a attacker to gain access to read or modify data. | 12 Apr 202300:00 | – | bdu_fstec |
 | CVE-2023-27290 | 4 Mar 202302:35 | – | circl |
 | IBM Observability with Instana 访问控制错误漏洞 | 3 Mar 202300:00 | – | cnnvd |
 | IBM Observability with Instana Access Control Error Vulnerability | 7 Mar 202300:00 | – | cnvd |
 | CVE-2023-27290 IBM Observability with Instana missing authentication | 3 Mar 202322:36 | – | cvelist |
 | Docker based datastores for IBM Instana 241-2 243-0 - No Authentication | 7 Apr 202300:00 | – | exploitdb |
 | EUVD-2023-31068 | 3 Oct 202520:07 | – | euvd |
 | CVE-2023-27290 | 3 Mar 202323:15 | – | nvd |
10
Node
OR
[
{
"defaultStatus": "unaffected",
"product": "Observability with Instana",
"vendor": "IBM",
"versions": [
{
"lessThan": "239-2",
"status": "affected",
"version": "239-0",
"versionType": "semver"
},
{
"lessThan": "241-2",
"status": "affected",
"version": "241-0",
"versionType": "semver"
},
{
"status": "affected",
"version": "243-0"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| v | query param | /_cat/indices | Unauthenticated access to Elasticsearch indices metadata via the _cat/indices endpoint. | CWE-306 |
| query | query param | /?query=SELECT%20*%20FROM%20system.tables | Unauthenticated execution of a SQL-like query against ClickHouse via the HTTP interface. | CWE-306 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 05:44Current
8.9High risk
Vulners AI Score8.9
CVSS 3.19.1
EPSS0.08573
SSVC