CVE-2024-54181CWE-78

IBM WebSphere Automation command injection

High · published December 30, 2024

CVSS v3.1
7.2
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to execute arbitrary code. Using specially crafted input, the user could exploit this vulnerability to execute arbitrary code on the system.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01001 · 62.5th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2024-12-30T13:41Z
EPSS history
Timeline
  • 30 DEC 13:41Z
    IBM WebSphere Automation command injection
    cvelistv5