CLSA-2026-1777470383 less: Fix of 2 CVEs

🗓️ 29 Apr 2026 13:46:28Reported by GoogleType

osv🔗 osv.dev👁 8 Views

Fixes two CVEs and extends ELS coverage to Red Hat, Oracle Linux, and CloudLinux; reships fixes to these platforms.

Reporter	Title	Published	Views	Family All 334
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to less atarbitrary command execution vulnerability [CVE-2024-32487]	6 Aug 202421:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	8 Aug 202417:29	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in less (CVE-2024-32487) affects Power HMC.	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in axios affect IBM Voice Gateway	15 Apr 202502:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in less library (CVE-2022-48624) affects Power HMC.	26 Jul 202410:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	23 Apr 202414:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	15 Apr 202502:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary command execution in Less [CVE-2022-48624]	20 Jun 202418:22	–	ibm
Tenable Nessus	Amazon Linux 2023 : less (ALAS2023-2023-123)	21 Mar 202300:00	–	nessus

Source	Link
errata	www.errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777470383.html

01 Jun 2026 00:33Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.8 - 8.6

EPSS0.01059

SSVC