Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:analytics_content_hub:2.3:*:*:*:*:*:*:*

part: a version: 2.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductAnalytics Content Hub (a44d4e91-1d2c-5c0f-bc03-0a79d5fecd65)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36090 vulnerable 2026-06-08 07:21:00.910125 IBM Analytics Content Hub information disclosure
MEDIUM (4.3)
IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain information about the application framework which could be used in reconnaissance to gather information for future attacks from a detailed technical error message.
Published: 2025-07-10T14:12:55.709Z
Updated: 2025-08-24T11:18:59.093Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39752 vulnerable 2026-06-08 06:41:51.524691 IBM Analytics Content Hub file upload
MEDIUM (6.8)
IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validating the type of file uploaded to Explore Content. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks.
Published: 2025-07-10T14:15:19.208Z
Updated: 2025-08-18T01:35:39.017Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38327 vulnerable 2026-06-08 06:41:45.076804 IBM Analytics Content Hub information disclosure
MEDIUM (6.8)
IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker to read and debug JavaScript used in the application's API.
Published: 2025-07-10T14:14:40.562Z
Updated: 2025-08-18T01:35:53.589Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37524 vulnerable 2026-06-08 06:39:47.779417 IBM Analytics Content Hub information disclosure
MEDIUM (5.3)
IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
Published: 2025-07-10T14:12:17.681Z
Updated: 2025-08-24T11:18:20.033Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.