Open Mainframe Project vulnerabilities

Products

• Zowe 6

Newest

• linuxfoundation zowe api mediation layer, open mainframe project zowe +1 more Conformance validation endpoint discloses detail about service to unauthenticated users CVE-2024-9802 5.3 MediumOctober 10, 2024
• linuxfoundation zowe api mediation layer, open mainframe project zowe +1 more Health endpoint offers list of onboarded services to unauthenticated users CVE-2024-9798 5.3 MediumOctober 10, 2024
• zowe cli, open mainframe project zowe cli - imperative +1 more Zowe CLI --show-inputs-only displays securely stored properties CVE-2024-6916 5.9 MediumJuly 19, 2024
• open mainframe project zowe, linuxfoundation zowe api mediation layer +1 more Imperative Local Command Injection allows Activity Masking CVE-2024-6834 9.0 CriticalJuly 17, 2024
• open mainframe project zowe Zowe CLI Auto-Init Leaks Credentials Locally CVE-2024-6833 Fix available 5.9 MediumJuly 17, 2024
• linuxfoundation zowe Imperative Local Command Injection allows Activity Masking CVE-2021-4326 Fix available 3.3 LowFebruary 22, 2023
• linuxfoundation zowe api mediation layer, open mainframe project zowe +1 more It is possible to manipulate the JWT token without the knowledge of the JWT secret and... CVE-2021-4314 5.3 MediumJanuary 18, 2023