CVE Feed

    Dashboard / CVE / CVE-2023-24971

    CVE-2023-24971

    IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 could allow a user to cause a denial of service due to the deserializing of untrusted serialized Java objects. IBM X-Force ID: 246976.

    Published:Jul 31, 2023
    Last Modified:Nov 21, 2024
    EPS:Jul 31, 2023
    EPSS Score:0.00086
    CVSS Score:7.5

    Affected Products

    Vendor
    Ibm
    Product
    B2b Advanced Communications
    Vendor
    Ibm
    Product
    Multi-enterprise Integration Gateway

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-586 Object Injection

    Related CVEs

    CVE-2023-22595 (CVSS 5.4) — IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 are vulnerable to…
    CVE-2016-5892 (CVSS 5.4) — Cross-site scripting (XSS) vulnerability in IBM 10x, as used in Multi-Enterprise Integration Gateway 1.x throu…
    CVE-2016-0341 (CVSS 7.5) — IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1…
    CVE-2015-7445 (CVSS 4.3) — IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.…
    CVE-2015-4973 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B…
    CVE-2015-5022 (CVSS 4.3) — IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High