CVE-2024-51454

{"id": "CVE-2024-51454", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-51454", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-22T17:49:50.448618Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:interim_fix_035:*:*:*:*:*:*", "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:interim_fix_017:*:*:*:*:*:*", "cpe:2.3:a:ibm:engineering_workflow_management:7.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:engineering_workflow_management:7.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:engineering_workflow_management:7.1:interim_fix_004:*:*:*:*:*:*", "cpe:2.3:a:ibm:engineering_workflow_management:7.1.0:interim_fix_004:*:*:*:*:*:*"], "vendor": "IBM", "product": "Engineering Workflow Management", "versions": [{"status": "affected", "version": "7.0.2", "versionType": "semver", "lessThanOrEqual": "7.0.2 Interim Fix 035"}, {"status": "affected", "version": "7.0.3", "versionType": "semver", "lessThanOrEqual": "7.0.3 Interim Fix 017"}, {"status": "affected", "version": "7.1", "versionType": "semver", "lessThanOrEqual": "7.1 Interim Fix 004"}]}]}], "published": "2026-06-22T16:16:31.973", "references": [{"url": "https://www.ibm.com/support/pages/node/7276371", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-644"}]}], "descriptions": [{"lang": "en", "value": "IBM Engineering Workflow Management 7.0.2 through 7.0.2 Interim Fix 035, 7.0.3 through 7.0.3 Interim Fix 017, and 7.1 through 7.1 Interim Fix 004 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking."}], "lastModified": "2026-06-26T20:05:47.557", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E5C3FDC-DD05-423A-8A14-8372C9741D9B"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBC6ACB3-087D-41BF-A8B0-1185DEDF059B"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix001:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60AD1C14-4A81-42A5-B049-186A5FD6B0E4"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix002:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19BFFADF-33A7-4CB9-AA0D-FA8438A75BB7"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix003:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9CE2E11-574B-4230-9A90-8EEC63FB19E2"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix004:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0633AA0F-0038-4309-835F-C0FE13355AEF"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix005:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD7C9AA9-1B20-48EE-9893-2DA65DE54B43"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix006:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41D868E8-FC5B-48E3-9533-D6C2C6E35CAC"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix007:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F062124-3C26-466A-AA4D-DEA5FC60D76B"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix008a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "838FD9C0-4443-4022-9ECA-E67527830BE7"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix009:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DDBB627-B40B-4747-9475-97AD329015CF"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix010:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88E6C0BA-DA91-4285-9B19-90526E1AB071"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix011:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6728BEF5-A3E7-48F5-891C-29669FEA4688"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix012:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2037F933-DCB2-4B38-8922-FBBBA3470EAE"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix013:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A87E9DC5-9B99-4534-A8ED-F219762AD051"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix014:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7C44644-8F15-486D-B9FD-3DFFB0968CAC"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix016:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF9CCC66-6139-4AE6-A41C-03F447D14D92"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix017:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "895820F8-2C04-4550-8720-391262EA3E07"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix018:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B75476C5-BF91-42EB-AA43-264089359DA7"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix020a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71B928DB-84D7-4016-B615-984E29B80DEF"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix021:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF64830D-AEDA-494D-AEDC-1639BBB8652A"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix022:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE8EAE48-2A3B-4FEC-98CA-6F9DA87B0663"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix023:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE4BC0A1-A410-4ABE-A293-FA59F107F329"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix024:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19AC2F20-52F8-45AF-996B-C6B2D62DD84D"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix025:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "377E4E94-5924-4300-BF83-EA90DAE79C79"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix026a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3A716A3-289B-41EA-BD68-4DC54469E9A5"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix027:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50854F7F-ACE0-4A9E-A395-2C28749D91BE"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix028:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B3FAAEA-63BD-4F47-8125-D781CDB5A652"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix029:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5EF1ECB7-6AFD-4EA5-8363-B55B9F6CFEC2"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix030:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26261373-AE06-40A1-9D6F-A2ED4900D19F"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix031:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E546178A-3EC0-4E15-AC13-7C9D81EC66A0"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix032:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6BB764B5-79FD-4AB7-B570-0F39F3302EAB"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix033:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF791B04-637B-43D6-A9BF-5933821B67CF"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix034:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99390BD9-19D7-4E08-BDAF-554DC91890E2"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:ifix035:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41580B59-C1D6-4F78-974A-90ECD3F66354"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CB2A4A5-05AB-4591-BC17-508B6CC52D19"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix001:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC3523E9-2176-4F06-89DE-B9E39A8B5DFF"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix002:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2856B724-9102-453D-92D9-D6960D723EEE"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix003:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F016ABC-BE79-4979-9A80-777F0D02615F"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix004:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9FC1B96-18D3-4E17-A9F1-B020F0D72590"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix005:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "936271E0-3CF6-43CE-81D2-C7B0BEB7BBE9"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix006:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D34862FD-AE18-46FE-B4E6-AC639120774D"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix007:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C3C127B-9AF2-4B7A-ACEE-9A2875CBAE99"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix008:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "181B8EF5-E34B-41EF-AE2D-3C202D4C88EB"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix009:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C8113D3-4934-4551-84BD-FC0A6489F82C"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix010:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8BE8D6E5-C897-4C58-BE03-C26B4D3C6494"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix011:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF1CFB7F-F8EB-4D71-8765-07CE49D31189"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix012:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38A55F98-2982-43E1-AE01-37B423C9B481"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix013:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "174815C1-90FD-4947-9EB7-9BF713DCD3D7"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix014:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA3149F4-EF4C-46F6-8DAF-C9217CF16F59"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix015:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C23BE8B-1492-40F2-A218-CF85A754D4FF"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix016:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11CFA2C9-C485-4780-A04C-FA39E7E7A3AA"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.0.3:ifix017:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05C3B457-57A8-4DA9-A95E-5D198974A0B0"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.1.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FAE09FF-371A-4B02-A837-40149E773AE0"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.1.0:ifix001:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E153E7C3-A2A5-4757-9684-3DCBCE05B9F5"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.1.0:ifix002:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B0984C6-0E92-4493-B0A2-40BC0888F2FE"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.1.0:ifix003:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F62B6927-F717-499A-8EC3-900AC06A3DF6"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.1.0:ifix004:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0883E0E8-8E67-44B8-B0D8-E6D55306B319"}, {"criteria": "cpe:2.3:a:ibm:engineering_workflow_management:7.1.0:ifix007:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4C0BF7F-D922-49C3-B62C-F904EB1DBCA6"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}