Lucene search
WolfiWOLFI:CVE-2024-28752HistorySep 23, 2024 - 9:13 a.m.
CVE-2024-28752 vulnerabilities
2024-09-2309:13:37
packages.wolfi.dev
17
vulnerabilities
opensearch-2
unix
cve-2024-28752
CVSS3
9.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
26.4%
Vulnerabilities for packages: opensearch
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Wolfi | unknown | x86_64 | opensearch | <= 2.13.0-r0 | opensearch-2.13.0-r0.apk |
| Wolfi | unknown | aarch64 | opensearch | <= 2.13.0-r0 | opensearch-2.13.0-r0.apk |
Related
veracode
veracode
Server-Side Request Forgery (SSRF)
2024-03-18 08:35:48
nvd
nvd
CVE-2024-28752
2024-03-15 11:15:09
cve
cve
CVE-2024-28752
2024-03-15 11:15:09
osv
osv
CGA-877w-8xxp-xv6m
2024-06-06 12:25:10
CGA-58x7-92cj-h7fv
2024-06-06 12:24:03
SSRF vulnerability using the Aegis DataBinding in Apache CXF
2024-03-15 12:30:37
redhatcve
redhatcve
CVE-2024-28752
2024-03-21 15:31:52
cgr
cgr
CVE-2024-28752 vulnerabilities
2024-05-19 03:07:16
vulnrichment
vulnrichment
CVE-2024-28752 Apache CXF SSRF Vulnerability using the Aegis databinding
2024-03-15 10:27:30
cvelist
cvelist
CVE-2024-28752 Apache CXF SSRF Vulnerability using the Aegis databinding
2024-03-15 10:27:30
ibm
ibm
github
github
SSRF vulnerability using the Aegis DataBinding in Apache CXF
2024-03-15 12:30:37
nessus
nessus
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
CVSS3
9.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
26.4%
Related for WOLFI:CVE-2024-28752