CVE-2024-39752CWE-434

IBM Analytics Content Hub file upload

Medium · published July 10, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
24.4
In the wild
Unconfirmed
What it is

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validating the type of file uploaded to Explore Content. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00326 · 24.4th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-07-10T14:15Z
EPSS history
Timeline
  • 10 JUL 14:15Z
    IBM Analytics Content Hub file upload
    cvelistv5