VDB
CVE-2024-40094
CVE-2024-40094
PUBLISHED
CVSS 8.699999809265137 HIGH
IBM WebSphere Application Server ist ein J2EE-Applikationsserver.
EPSS 17.53% · 95.2th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
17.53%
95.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 7 | |
| Red Hat | Red Hat OpenShift Serverless Logic <1.35.0 | |
| Red Hat | Red Hat JBoss Enterprise Application Platform <7.4.23 | |
| Red Hat | Red Hat Enterprise Linux | |
| IBM | IBM Spectrum Protect | |
| Amazon | Amazon Linux 2 | |
| Splunk | Splunk Splunk Enterprise <9.4.4 | |
| IBM | IBM Cognos Analytics <11.2.4 IF4 | |
| IBM | IBM License Metric Tool | |
| Red Hat | Red Hat Enterprise Linux AI | |
| Red Hat | Red Hat JBoss Enterprise Application Platform <7.4.24 | |
| Red Hat | Red Hat OpenStack 16.2 | |
| Apache | Apache Camel | |
| Red Hat | Red Hat Enterprise Linux 9 | |
| Red Hat | Red Hat OpenShift | |
| Red Hat | Red Hat JBoss Enterprise Application Platform Quarkus <3.2.12.SP1 | |
| Splunk | Splunk Splunk Enterprise <9.3.6 | |
| Ubuntu | Ubuntu Linux | |
| IBM | IBM TXSeries for multiplatforms | |
| Red Hat | Red Hat Enterprise Linux Cryostat 3 |
…and 11 more
Exploit Intelligence
- This script exploits the CVE-2024-40094 vulnerability in graphql-java (github-poc-repo)
- This script exploits the CVE-2024-40094 vulnerability in graphql-java (github-poc-repo)
- This script exploits the CVE-2024-40094 vulnerability in graphql-java (github-poc-repo)
- This script exploits the CVE-2024-40094 vulnerability in graphql-java (github-poc-repo)
- This script exploits the CVE-2024-40094 vulnerability in graphql-java (github-poc-repo)
- This script exploits the CVE-2024-40094 vulnerability in graphql-java (github-poc-repo)
- This script exploits the CVE-2024-40094 vulnerability in graphql-java (github-poc-repo)
- This script exploits the CVE-2024-40094 vulnerability in graphql-java (github-poc-repo)
- This script exploits the CVE-2024-40094 vulnerability in graphql-java (github-poc-repo)
- This script exploits the CVE-2024-40094 vulnerability in graphql-java (github-poc)
…and 7 more exploits
Timeline
- Jan 20, 1970 Fix PR Merged
- Jul 30, 2024 CVE Published
- Jul 30, 2024 EPSS Score
- Sep 11, 2024 EPSS Score
- Oct 2, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Nov 14, 2024 EPSS Score
- Nov 20, 2024 CVE Updated
- Dec 6, 2024 EPSS Score
- Jan 17, 2025 EPSS Score
- Feb 8, 2025 EPSS Score
- Mar 17, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3147.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3147 advisory
- https://access.redhat.com/errata/RHSA-2024:7670 advisory
- https://access.redhat.com/errata/RHSA-2024:7676 advisory
- https://access.redhat.com/errata/RHSA-2024:7972 advisory
- https://access.redhat.com/errata/RHSA-2024:8093 advisory
- https://access.redhat.com/errata/RHSA-2024:8329 advisory
- https://access.redhat.com/errata/RHSA-2024:9571 advisory
- https://alas.aws.amazon.com/AL2/ALAS-2024-2693.html advisory
- https://security.netapp.com/advisory/ntap-20241213-0010/ advisory
- https://access.redhat.com/errata/RHSA-2025:0664 advisory
- https://access.redhat.com/errata/RHSA-2025:7620 advisory
- https://ubuntu.com/security/notices/USN-7629-2 advisory
- https://advisory.splunk.com//advisories/SVD-2025-1007 advisory
- https://access.redhat.com/errata/RHSA-2025:20052 advisory
- https://access.redhat.com/errata/RHSA-2025:20057 advisory
- https://access.redhat.com/errata/RHSA-2026:4915 advisory
- https://access.redhat.com/errata/RHSA-2026:4916 advisory
- https://access.redhat.com/errata/RHSA-2026:4924 advisory
- https://access.redhat.com/errata/RHSA-2026:4917 advisory
…and 13 more