Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:analytics_content_hub:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductAnalytics Content Hub (a44d4e91-1d2c-5c0f-bc03-0a79d5fecd65)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36090 vulnerable 2026-06-08 07:21:00.911301 IBM Analytics Content Hub information disclosure
MEDIUM (4.3)
IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain information about the application framework which could be used in reconnaissance to gather information for future attacks from a detailed technical error message.
Published: 2025-07-10T14:12:55.709Z
Updated: 2025-08-24T11:18:59.093Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39752 vulnerable 2026-06-08 06:41:51.524713 IBM Analytics Content Hub file upload
MEDIUM (6.8)
IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validating the type of file uploaded to Explore Content. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks.
Published: 2025-07-10T14:15:19.208Z
Updated: 2025-08-18T01:35:39.017Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39750 vulnerable 2026-06-08 06:41:51.522178 IBM Analytics Content Hub buffer overflow
HIGH (8.8)
IBM Analytics Content Hub 2.0 is vulnerable to a buffer overflow due to improper return length checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.
Published: 2025-01-25T14:04:41.115Z
Updated: 2025-09-29T15:18:14.241Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38327 vulnerable 2026-06-08 06:41:45.077773 IBM Analytics Content Hub information disclosure
MEDIUM (6.8)
IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker to read and debug JavaScript used in the application's API.
Published: 2025-07-10T14:14:40.562Z
Updated: 2025-08-18T01:35:53.589Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37524 vulnerable 2026-06-08 06:39:47.780191 IBM Analytics Content Hub information disclosure
MEDIUM (5.3)
IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
Published: 2025-07-10T14:12:17.681Z
Updated: 2025-08-24T11:18:20.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35134 vulnerable 2026-06-08 06:37:35.260118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.