IBM Smartcloud Analytics Log Analysis vulnerabilities

10 CVEs affecting IBM Smartcloud Analytics Log Analysis, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-41751, published 2025-07-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-4244, published 2019-12-10. Critical severity, CVSS 9.1. EPSS: 2.1% chance of exploitation in the next 30 days. IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to gain unauthorized information and unrestricted control over Zookeeper installations due to missing authentication. IBM…
CVE-2013-6738, published 2014-04-24. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-IF0003 allows remote attackers to inject arbitrary web script or HTML via an…
CVE-2019-4215, published 2019-11-22. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could…
CVE-2019-4216, published 2019-11-22. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM X-Force ID: 159187.
CVE-2019-4214, published 2019-11-22. Low severity, CVSS 3.7. EPSS: 0.5% chance of exploitation in the next 30 days. IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in…
CVE-2019-4243, published 2019-11-22. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. IBM SmartCloud Analytics 1.3.1 through 1.3.5 allows unauthorized disclosure of information like accessing solrconfig.xml and could allow an attacker to perform disruptive administrator tasks. IBM…
CVE-2024-40686, published 2025-07-23. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.…
CVE-2024-41751, published 2025-07-23. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 could allow a local, authenticated attacker to bypass client-side enforcement of security to…
CVE-2024-41750, published 2025-07-23. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 could allow a local, authenticated attacker to bypass client-side enforcement of security to…
CVE-2024-40682, published 2025-07-23. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 could allow a local user to cause a denial of service due to improper validation of specified type of…