PT-2024-7497

🗓️ 25 Oct 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

Weaknesses in Spring WebFlux allow attackers to compromise protected information with no fix available.

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for February 2025.	12 Mar 202511:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager	16 Dec 202507:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects BigReplicate (CVE-2024-51504, CVE-2024-38821, CVE-2023-20863)	26 Aug 202520:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in spring-security-web-5.8.5.jar	8 Jul 202506:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for Nov 2024	26 Nov 202409:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for Jan 2025 - Multiple CVEs addressed	14 Feb 202505:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - AI Broker Component uses spring-security-web-6.3.3.jar which is vulnerable to this CVE-2024-38821	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring WebFlux, Jenkins, Spring Securiy, Spring Framework, and Node.js lodash might affect IBM Storage Defender Copy Data Management.	5 May 202618:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager	16 Dec 202505:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring WebFlux affects watsonx.data	27 Feb 202513:26	–	ibm

Source	Link
twitter	www.twitter.com/Ransom_DB/status/1852666626014871597
osv	www.osv.dev/vulnerability/ghsa-3677-xxcr-wjqv
osv	www.osv.dev/vulnerability/ghsa-qqpg-mvqg-649v
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-7962
twitter	www.twitter.com/herodevs/status/1892659901958144162
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-5588
twitter	www.twitter.com/TuxCare_/status/1852070689794330711
security	www.security.netapp.com/advisory/ntap-20250124-0006
twitter	www.twitter.com/ohhara_shiojiri/status/1853676860305182769
osv	www.osv.dev/vulnerability/CVE-2026-3505

25 May 2026 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 29.4

CVSS 3.19.1

EPSS0.1309

SSVC