← Back

CVE-2024-51454

nvd nist
Published: Jun 22, 2026Modified: Jun 26, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

IBM Engineering Workflow Management 7.0.2 through 7.0.2 Interim Fix 035, 7.0.3 through 7.0.3 Interim Fix 017, and 7.1 through 7.1 Interim Fix 004 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.

Affected (59)

Ibm
1 product
Engineering Workflow Management
Configuration A
59 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Engineering Workflow Management
Version 7.0.2
Engineering Workflow Management
Version 7.0.2
Engineering Workflow Management
Version 7.0.2 ifix001
Engineering Workflow Management
Version 7.0.2 ifix002
Engineering Workflow Management
Version 7.0.2 ifix003
Engineering Workflow Management
Version 7.0.2 ifix004
Engineering Workflow Management
Version 7.0.2 ifix005
Engineering Workflow Management
Version 7.0.2 ifix006
Engineering Workflow Management
Version 7.0.2 ifix007
Engineering Workflow Management
Version 7.0.2 ifix008a
Engineering Workflow Management
Version 7.0.2 ifix009
Engineering Workflow Management
Version 7.0.2 ifix010
Engineering Workflow Management
Version 7.0.2 ifix011
Engineering Workflow Management
Version 7.0.2 ifix012
Engineering Workflow Management
Version 7.0.2 ifix013
Engineering Workflow Management
Version 7.0.2 ifix014
Engineering Workflow Management
Version 7.0.2 ifix016
Engineering Workflow Management
Version 7.0.2 ifix017
Engineering Workflow Management
Version 7.0.2 ifix018
Engineering Workflow Management
Version 7.0.2 ifix020a
Engineering Workflow Management
Version 7.0.2 ifix021
Engineering Workflow Management
Version 7.0.2 ifix022
Engineering Workflow Management
Version 7.0.2 ifix023
Engineering Workflow Management
Version 7.0.2 ifix024
Engineering Workflow Management
Version 7.0.2 ifix025
Engineering Workflow Management
Version 7.0.2 ifix026a
Engineering Workflow Management
Version 7.0.2 ifix027
Engineering Workflow Management
Version 7.0.2 ifix028
Engineering Workflow Management
Version 7.0.2 ifix029
Engineering Workflow Management
Version 7.0.2 ifix030
Engineering Workflow Management
Version 7.0.2 ifix031
Engineering Workflow Management
Version 7.0.2 ifix032
Engineering Workflow Management
Version 7.0.2 ifix033
Engineering Workflow Management
Version 7.0.2 ifix034
Engineering Workflow Management
Version 7.0.2 ifix035
Engineering Workflow Management
Version 7.0.3
Engineering Workflow Management
Version 7.0.3 ifix001
Engineering Workflow Management
Version 7.0.3 ifix002
Engineering Workflow Management
Version 7.0.3 ifix003
Engineering Workflow Management
Version 7.0.3 ifix004
Engineering Workflow Management
Version 7.0.3 ifix005
Engineering Workflow Management
Version 7.0.3 ifix006
Engineering Workflow Management
Version 7.0.3 ifix007
Engineering Workflow Management
Version 7.0.3 ifix008
Engineering Workflow Management
Version 7.0.3 ifix009
Engineering Workflow Management
Version 7.0.3 ifix010
Engineering Workflow Management
Version 7.0.3 ifix011
Engineering Workflow Management
Version 7.0.3 ifix012
Engineering Workflow Management
Version 7.0.3 ifix013
Engineering Workflow Management
Version 7.0.3 ifix014
Engineering Workflow Management
Version 7.0.3 ifix015
Engineering Workflow Management
Version 7.0.3 ifix016
Engineering Workflow Management
Version 7.0.3 ifix017
Engineering Workflow Management
Version 7.1.0
Engineering Workflow Management
Version 7.1.0 ifix001
Engineering Workflow Management
Version 7.1.0 ifix002
Engineering Workflow Management
Version 7.1.0 ifix003
Engineering Workflow Management
Version 7.1.0 ifix004
Engineering Workflow Management
Version 7.1.0 ifix007

Related CWEs

CWE-644
Improper Neutralization of HTTP Headers for Scripting Syntax
The product does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers, such as Flash.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.