PT-2024-2082

🗓️ 09 Mar 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 9 Views

Libexpat versions up to 2.6.1 are vulnerable to external entity attacks; update to 2.6.2 or disable external parsers.

Reporter	Title	Published	Views	Family All 458
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On due to Expat vulnerabilities	11 Apr 202202:48	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Expat IBM Tivoli Network Manager is vulnerable to arbitrary code execution (multiple vulnerabilities)	4 Jul 202212:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities in Expact library.	19 Jul 202208:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from expat, Golang Go, gcc, openssl and libxml.	16 May 202206:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	7 May 202417:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Open Source affect Cloud Pak System	28 Oct 202417:07	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is affected by information disclosure due to Python (CVE-2024-28757)	13 Jun 202422:04	–	ibm
IBM Security Bulletins	Security Bulletin: Expat vulnerabilities affect IBM Netezza Analytics for NPS	3 Jun 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL.	25 Jan 202611:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Analytics - NPS	11 Jul 202511:19	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-22825
bugzilla	www.bugzilla.suse.com/1229932
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45490
osv	www.osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2024-28757
osv	www.osv.dev/vulnerability/CVE-2022-22825
suse	www.suse.com/security/cve/CVE-2023-52426
osv	www.osv.dev/vulnerability/BELL-CVE-2024-28757
access	www.access.redhat.com/security/cve/CVE-2023-52425
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YT18139.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23852

25 Jun 2026 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 3.18.8 - 9.8

CVSS 26.8

EPSS0.02636

SSVC