CVE-2024-49343CWE-80

IBM Informix Dynamic Server HTML injection

Medium · published July 28, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

IBM Informix Dynamic Server 12.10 and 14.10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00223 · 12.2th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2025-07-28T15:27Z
EPSS history
Timeline
  • 28 JUL 15:27Z
    IBM Informix Dynamic Server HTML injection
    cvelistv5