CVE Browser

Page 1

Vendor: Open Mainframe Project Clear all

CVE-2024-9802 MEDIUM

Conformance validation endpoint discloses detail about service to unauthenticated users

CVSS 5.3 EPSS 0.21% Oct 10, 2024

CVE-2024-9798 MEDIUM

Health endpoint offers list of onboarded services to unauthenticated users

CVSS 5.3 EPSS 0.23% Oct 10, 2024

CVE-2024-6916 MEDIUM

Zowe CLI --show-inputs-only displays securely stored properties

CVSS 5.9 EPSS 0.14% Jul 19, 2024

CVE-2024-6834 CRITICAL

Imperative Local Command Injection allows Activity Masking

CVSS 9.0 EPSS 0.26% Jul 17, 2024

CVE-2024-6833 MEDIUM

Zowe CLI Auto-Init Leaks Credentials Locally

CVSS 6.9 EPSS 0.14% Jul 17, 2024

CVE-2021-4326 HIGH

Imperative Local Command Injection allows Activity Masking

CVSS 7.8 EPSS 0.26% Feb 22, 2023

CVE-2021-4314 MEDIUM

It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT token as any user. This is happening only…

CVSS 5.3 EPSS 0.44% Jan 18, 2023

CVE ID	Description	Severity	CVSS	EPSS	Ecosystems	Published
CVE-2024-9802	Conformance validation endpoint discloses detail about service to unauthenticated users	MEDIUM	5.3	0.21%		Oct 10, 2024
CVE-2024-9798	Health endpoint offers list of onboarded services to unauthenticated users	MEDIUM	5.3	0.23%		Oct 10, 2024
CVE-2024-6916	Zowe CLI --show-inputs-only displays securely stored properties	MEDIUM	5.9	0.14%		Jul 19, 2024
CVE-2024-6834	Imperative Local Command Injection allows Activity Masking	CRITICAL	9.0	0.26%		Jul 17, 2024
CVE-2024-6833	Zowe CLI Auto-Init Leaks Credentials Locally	MEDIUM	6.9	0.14%	npm	Jul 17, 2024
CVE-2021-4326	Imperative Local Command Injection allows Activity Masking	HIGH	7.8	0.26%	npm	Feb 22, 2023
CVE-2021-4314	It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT token as any user. This is happening only…	MEDIUM	5.3	0.44%		Jan 18, 2023

Rows per page

Showing 1 to 7 CVEs · page 1