Open Mainframe Project vulnerabilities
7 published CVEs name Open Mainframe Project among the affected products.
- Published CVEs
- 7
- Last 12 months
- 0
- Critical
- 1
- Known exploited
- 0
Critical 1High 0Medium 5Low 1Not scored 0
CVEs per yearBy the year they were published
- 20232
- 20245
Newest CVEs
- CVE-2024-9802
Conformance validation endpoint discloses detail about service to unauthenticated users
Open Mainframe Project · Zowe
Medium5.3 - CVE-2024-9798
Health endpoint offers list of onboarded services to unauthenticated users
Open Mainframe Project · Zowe
Medium5.3 - CVE-2024-6916
Zowe CLI --show-inputs-only displays securely stored properties
Open Mainframe Project · Zowe CLI - Imperative
Medium5.9 - CVE-2024-6834
Imperative Local Command Injection allows Activity Masking
Open Mainframe Project · Zowe
Critical9.0 - CVE-2024-6833
Zowe CLI Auto-Init Leaks Credentials Locally
Open Mainframe Project · Zowe
Medium5.9 - CVE-2021-4326
Imperative Local Command Injection allows Activity Masking
Open Mainframe Project · Zowe
Low3.3 - CVE-2021-4314
It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT token as any user. This is happening only…
Open Mainframe Project · Zowe
Medium5.3