Weakness (CWE)
CWE-16: Configuration
Category Obsolete Mapping prohibited
Weaknesses in this category are typically introduced during the configuration of the software.
Source: MITRE CWE-16
2 results · Clear filters · Feed
-
Critical 9.1
IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks.
IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration.
-
Critical 9.8CVE-2024-46909 EPSS 49%
WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability
In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage this vulnerability to execute code in the context of the service account.