CVE-2024-28764 — IBM WebSphere Automation CSV injection
IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection. An attacker could execute arbitrary commands on the sys…
Published: 2024-05-01 · CVSS: 6.5 · CVSS 3.1
IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection. An attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 285623.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7