CVE-2024-47113

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

IBM ICP - Voice Gateway 1.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5, 1.0.6. 1.0.7, 1.0.7.1, and 1.0.8 could allow remote attacker to send specially crafted XML statements, which would allow them to attacker to view or modify information in the XML document.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-91

Affected software

No affected versions have been published.

Timeline

Published: Jan 18, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-471157.8IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on the system due to improper neutralization of CVE-2024-471165.4IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This CVE-2024-471175.4IBM Carbon Design System (Carbon Charts 0.4.0 through 1.13.16) is vulnerable to cross-site scripting. This vulnerability allows an authentic CVE-2024-471187.5IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (inclu CVE-2024-471197.5IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 does not properly validate a certificate which could allow an attacker to spoo CVE-2024-47127.8An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific fl CVE-2024-471206.8IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a privileged user to escalate their privileges and atta CVE-2024-471215.3The goTenna Pro App uses a weak password for sharing encryption keys via the key broadcast method. If the broadcasted encryption key is cap CVE-2024-471226.5In the goTenna Pro App, the encryption keys are stored along with a static IV on the End User Device (EUD). This allows for complete decry CVE-2024-471233.1The goTenna Pro App uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms. This CVE-2024-471246.5The goTenna Pro App does not encrypt callsigns in messages. It is recommended to not use sensitive information in callsigns when using thi CVE-2024-471255.4The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to upd