Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: IBM Analytics Content Hub — ibm.com/support/pages/node/7234122 Clear all filters
TI-2024-26670 CVE-2024-39752 · GHSA-r6q8-9x29-mrj4

IBM Analytics Content Hub file upload

Priority MEDIUM 42

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validating the type of file uploaded to Explore Content.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00326 Published 2025-07-10 No fix listed CWE-434
TI-2024-25599 CVE-2024-38327 · GHSA-3h9x-vrj4-4p73

IBM Analytics Content Hub information disclosure

Priority MEDIUM 42

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker to read and debug JavaScript used in the a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00326 Published 2025-07-10 No fix listed CWE-540
TI-2025-24681 CVE-2025-36090 · GHSA-8pv2-w89q-5fxp

IBM Analytics Content Hub information disclosure

Priority LOW 24

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain information about the application framework which could be used in reconnaissance to gather information for future attacks from a d…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00319 Published 2025-07-10 No fix listed CWE-209
TI-2024-25028 CVE-2024-37524 · GHSA-fh26-frgr-hxxc

IBM Analytics Content Hub information disclosure

Priority LOW 24

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00338 Published 2025-07-10 No fix listed CWE-209