IBM Analytics Content Hub vulnerabilities

6 CVEs affecting IBM Analytics Content Hub, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-36090, published 2025-07-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-39750, published 2025-01-25. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Analytics Content Hub 2.0 is vulnerable to a buffer overflow due to improper return length checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the…
CVE-2024-35134, published 2025-01-25. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Analytics Content Hub 2.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in…
CVE-2024-37524, published 2025-07-10. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
CVE-2024-39752, published 2025-07-10. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validating the type of file uploaded to Explore Content. Attackers can make use of this weakness…
CVE-2024-38327, published 2025-07-10. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker to read and debug…
CVE-2025-36090, published 2025-07-10. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain information about the application framework which could be used in reconnaissance to gather information for…