CVE-2024-45094

ibm hardware management console r10.0 firmware, ibm hardware management console r9.4 firmware, ibm hardware management console r9.3 firmware

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-45094

Katalog CVE

CVSS 5.4 · Medium EPSS 0,22%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada ibm hardware management console r10.0 firmware, ibm hardware management console r9.4 firmware +1 lainnya. Skor CVSS 3.1 5.4 (Medium) menurut NVD.

Deskripsi (NVD)

IBM DS8900F and DS8A00 Hardware Management Console (HMC) is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Rincian

Terbit di NVD
27 Mei 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
5.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
0,22% peluang dieksploitasi; lebih tinggi dari 11,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
ibm hardware management console r10.0 firmware Versi 10.0.245.0
ibm hardware management console r10.0 firmware Versi 10.1.3.0
ibm hardware management console r9.4 firmware Versi 89.40.83.0
ibm hardware management console r9.4 firmware Versi 89.41.25.0
ibm hardware management console r9.4 firmware Versi 89.42.18.0
ibm hardware management console r9.3 firmware Versi 89.33.45.0
ibm hardware management console r9.3 firmware Versi 89.33.52.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.