CVE-2024-49791: IBM ApplinX Cross-Site Scripting
FasterXML Jackson Core is vulnerable to a denial of service, caused by an out of memory error when writing big decimal when the WRITEBIGDECIMALASPLAIN setting is enabled. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause a denial of service condition.
Other sources
IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49791?
CVE-2024-49791 has a high severity level due to its potential for denial of service.
How do I fix CVE-2024-49791?
To fix CVE-2024-49791, users should update to the patched version of IBM ApplinX 11.1.0 Fix 2.
What type of attack exploits CVE-2024-49791?
CVE-2024-49791 can be exploited through specially-crafted requests that lead to an out of memory error.
Which software is affected by CVE-2024-49791?
CVE-2024-49791 affects IBM ApplinX versions up to and including 11.1.
What is the impact of CVE-2024-49791?
The impact of CVE-2024-49791 is a denial of service, potentially rendering the application unusable.