CVE-2024-37997

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter Visualization V14.2 (All versions < V14.2.0.13), Teamcenter Visualization V14.3 (All versions < V14.3.0.11), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0003). The affected applications contain a stack based overflow vulnerability while parsing specially crafted XML files. This could allow an attacker to execute code in the context of the current process.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-379989.8A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1CVE-2024-379997.8A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions). The affected application executes as a trusted accounCVE-2024-38006.1Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names.  Only a paCVE-2024-380028.8The workflow component in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, CVE-2024-38016.1Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters.  OCVE-2024-380108.0Secure Boot Security Feature Bypass VulnerabilityCVE-2024-380118.0Secure Boot Security Feature Bypass VulnerabilityCVE-2024-380136.7Microsoft Windows Server Backup Elevation of Privilege VulnerabilityCVE-2024-380147.8Windows Installer Elevation of Privilege VulnerabilityCVE-2024-380157.5Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityCVE-2024-380167.8Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2024-380175.5Microsoft Message Queuing Information Disclosure Vulnerability