Lucene search
K

EUVD-2024-0922

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 1 Views

JSONata can be exploited in versions 1.4.0 to 1.8.6 leading to serious security vulnerabilities.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: IBM App Connect Enterprise Certified Container instances that run or edit flows containing JSONata mapping are vulnerable to arbitrary code execution due to [CVE-2024-27307]
2 Apr 202410:25
ibm
IBM Security Bulletins
Security Bulletin: IBM Edge Application Manager 4.5.5 addresses the security vulnerabilities listed in the CVEs below.
19 Apr 202420:36
ibm
IBM Security Bulletins
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in jsonata-js JSONata
26 Feb 202518:40
ibm
IBM Security Bulletins
Security Bulletin: Netcool Operations Insights 1.6.13 addresses multiple security vulnerabilities.
31 Jul 202411:01
ibm
IBM Security Bulletins
Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service and remote attack due to node.js jose module and jsonata-js JSONata (CVE-2024-28176, CVE-2024-27307)
16 Apr 202415:42
ibm
IBM Security Bulletins
Security Bulletin: IBM Maximo Application Suite uses jsonata-1.8.6 which is vulnerable to CVE-2024-27307, CVE-2022-34169, CVE-2023-20861, CVE-2023-3635, CVE-2018-10237, CVE-2023-33201, CVE-2023-33202, CVE-2023-45288, CVE-2023-20863
28 Jan 202522:08
ibm
BDU FSTEC
The vulnerability of the JSONata data transformation software lies in the uncontrolled modification of prototype attributes, allowing attackers to execute arbitrary code or cause service failures.
19 Mar 202400:00
bdu_fstec
Chainguard
CVE-2024-27307 vulnerabilities
6 Mar 202420:15
cgr
Circl
CVE-2024-27307
6 Mar 202421:26
circl
CNNVD
JSONata Security Vulnerabilities
6 Mar 202400:00
cnnvd
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "7ad69cd2-8d2b-3b84-a20a-1118d57bcd97",
        "vendor": {
          "name": "jsonata-js"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "4bdde3c6-6f36-3711-8975-fba6fec45e3d",
        "product": {
          "name": "jsonata"
        },
        "product_version": "1.4.0, < 1.8.7"
      },
      {
        "id": "eef27939-ad3f-3088-b7df-d24a84a4893b",
        "product": {
          "name": "jsonata"
        }
      },
      {
        "id": "fbff94a9-719c-3cb0-bdd7-7b0ed0df002c",
        "product": {
          "name": "jsonata"
        },
        "product_version": "2.0.0, < 2.0.4"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
8.1High risk
Vulners AI Score8.1
CVSS 3.19.8
EPSS0.00888
SSVC
1