CVE-2024-31892: IBM Storage Scale SQL injection
7.5
CVSS
Description
IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 could allow a user to perform unauthorized actions after intercepting and modifying a csv file due to improper neutralization of formula elements.
Classification
CVE ID: CVE-2024-31892
CVSS Base Severity: HIGH
CVSS Base Score: 7.5
Affected Products
Vendor: IBM
Product: Storage Scale
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.09% (probability of being exploited)
EPSS Percentile: 40.72% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)