CVE-2024-37996

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter Visualization V14.2 (All versions < V14.2.0.13), Teamcenter Visualization V14.3 (All versions < V14.3.0.11), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0003). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted XML files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published: Jul 9, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-379977.8A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0 CVE-2024-379989.8A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1 CVE-2024-379997.8A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions). The affected application executes as a trusted accoun CVE-2024-38006.1Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names. Only a pa CVE-2024-380028.8The workflow component in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, CVE-2024-38016.1Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters. O CVE-2024-380108.0Secure Boot Security Feature Bypass Vulnerability CVE-2024-380118.0Secure Boot Security Feature Bypass Vulnerability CVE-2024-380136.7Microsoft Windows Server Backup Elevation of Privilege Vulnerability CVE-2024-380147.8Windows Installer Elevation of Privilege Vulnerability CVE-2024-380157.5Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability CVE-2024-380167.8Microsoft Office Visio Remote Code Execution Vulnerability