applinx vulnerabilities and fixes

Recent CVEs affecting applinx, with upgrade or downgrade steps. 9 tracked.

applinx has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-06. Highest priority: CVE-2024-49797 (score 30/100).

• CVE-2024-49800 MEDIUM 4.3 DOWNGRADE IBM ApplinX 11.1 stores sensitive information in cleartext in memory that could be obtained by an authenticate
• CVE-2024-49798 MEDIUM 4.3 DOWNGRADE IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error
• CVE-2024-49797 MEDIUM 5.9 DOWNGRADE IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to prope
• CVE-2024-49796 MEDIUM 5.4 DOWNGRADE IBM ApplinX 11.1 could allow a remote attacker to hijack the clicking action of the victim
• CVE-2024-49795 MEDIUM 4.3 DOWNGRADE IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute maliciou
• CVE-2024-49794 MEDIUM 4.3 DOWNGRADE IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute maliciou
• CVE-2024-49793 MEDIUM 5.4 DOWNGRADE IBM ApplinX 11.1 is vulnerable to cross-site scripting
• CVE-2024-49792 MEDIUM 5.4 DOWNGRADE IBM ApplinX 11.1 is vulnerable to cross-site scripting
• CVE-2024-49791 MEDIUM 6.4 DOWNGRADE IBM ApplinX 11.1 is vulnerable to cross-site scripting

FAQ

How do I fix applinx vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is applinx being exploited right now?

None of the tracked applinx CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which applinx CVE should I patch first?

CVE-2024-49797 currently ranks highest (30/100): IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to prope.

RSS feed for applinx · ← Back to latest CVEs