← Vulnerability feed

Vulnerability record · CVE-2024-49800 · published 6 February 2025

CVE-2024-49800: Ibm applinx cleartext storage of sensitive data vulnerability

Ibm · Applinx

IBM ApplinX 11.1 stores sensitive information in cleartext in memory that could be obtained by an authenticated user.

6.5 CVSS 3.1 Medium EPSS 0.20% · top 90.9% CWE-316 · CWE-316CWE-312 · Cleartext storage of sensitive data
6.5CVSS 3.1 base score
0.20%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

IBM ApplinX 11.1 stores sensitive information in cleartext in memory that could be obtained by an authenticated user.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.ibm.com/support/pages/node/7182522 Vendor Advisory

Track CVE-2024-49800 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-36418Ibm applinx improper verification of cryptographic signature vulnerabilityIBM ApplinX 11.1 is vulnerable due to a privilege escalation vulnerability due to improper verification of JWT tokens. An attacker may be able to cra…EPSS 0.17%6.4CVE-2025-36408Ibm applinx cross-site scripting vulnerabilityIBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in …EPSS 0.19%5.9CVE-2024-49797Ibm applinx broken cryptographic algorithm vulnerabilityIBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Securi…EPSS 0.25%5.4CVE-2025-36409Ibm applinx cross-site scripting vulnerabilityIBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web…EPSS 0.17%5.4CVE-2024-49796Ibm applinx clickjacking vulnerabilityIBM ApplinX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a r…EPSS 0.41%5.4CVE-2024-49791Ibm applinx cross-site scripting vulnerabilityIBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web…EPSS 0.22%5.4CVE-2024-49792Ibm applinx cross-site scripting vulnerabilityIBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web…EPSS 0.22%5.4CVE-2024-49793Ibm applinx cross-site scripting vulnerabilityIBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web…EPSS 0.22%

Source: NIST National Vulnerability Database (record CVE-2024-49800), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.