VDB
CVE-2024-49343
CVE-2024-49343
PUBLISHED
CVSS 5.4 MEDIUM
IBM Informix Dynamic Server HTML injection
Reported by ibm · Published July 28, 2025
IBM Informix Dynamic Server 12.10 and 14.10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Risk scores
CVSS 3.1
5.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| IBM | Informix Dynamic Server | 12.10, 14.10 |
| IBM | Informix Dynamic Server | 12.10, 14.10 |
Timeline
- Jul 27, 2025 CVE Published
- Jul 28, 2025 Coalition ESS Score (9 in total, the first dated here)
- Jul 28, 2025 CVE Updated
- Jul 29, 2025 EPSS Score (30 in total, the first dated here)
- Jun 2, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-49343
vulnetix vdb fixes CVE-2024-49343Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-49343/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart