CVE-2024-22319

IBM Operational Decision Manager JDNI injection

IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, 8.11.1 and 8.12.0.1 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API. IBM X-Force ID: 279145.

Affected

IBM · Operational Decision Manager

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 IBM

8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

76.40% chance of exploitation in the next 30 days, 100th percentile

Nuclei

critical · CWE-74

Published

2024-02-02

Updated

2024-08-01

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22319.yaml

Security advisories

• https://exchange.xforce.ibmcloud.com/vulnerabilities/279145
• https://www.ibm.com/support/pages/node/7112382

References

• CVE Record
• NVD entry