PT-2024-28780

🗓️ 30 Jul 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 11 Views

GraphQL Java DoS risk from improper introspection field handling; upgrade to 21.5+.

Reporter	Title	Published	Views	Family All 224
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses IBM WebSphere Application Server Liberty which is vulnerable to CVE-2024-40094.	10 Apr 202510:14	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for July 2025.	7 Aug 202508:58	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Netty IBM webMethods Managed File Transfer is vulnerable to Improper Access Control and Allocation of Resources without Limits or Throttling	6 Aug 202613:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty and Java may affect IBM Storage Protect for Virtual Environments (Data Protection for VMware and Data Protection for Hyper-V)	20 Jun 202518:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Tivoli Netcool Impact	24 Oct 202517:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in GraphQL Java affects IBM watsonx Assistant for IBM Cloud Pak for Data	5 Feb 202520:35	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in Netty affects IBM Netezza Appliance	10 Aug 202609:06	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service vulnerability in WebSphere Liberty affects IBM SPSS Analytic Server (CVE-2024-40094)	7 Mar 202504:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty and Java may affect IBM Storage Protect for Space Management	20 Jun 202518:36	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2022-3171
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-34454
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-VH41554.json
osv	www.osv.dev/vulnerability/CVE-2024-6763
osv	www.osv.dev/vulnerability/CVE-2023-34455
osv	www.osv.dev/vulnerability/ghsa-fghv-69vj-qj49
osv	www.osv.dev/vulnerability/ghsa-g5ww-5jh7-63cx
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-27315
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-44248
osv	www.osv.dev/vulnerability/ghsa-25qh-j22f-pwp8

17 Jun 2026 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 48.7

CVSS 3.16.5

EPSS0.00943

SSVC

Executable Normalized Fields Introspection abuse Twenty one five Twenty nine Nineteen eleven GraphQL Java