Open Mainframe Project vulnerabilities
7 published CVEs name Open Mainframe Project among the affected products.
- 7Published CVEs7 of them scored
- 0Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-9802
Conformance validation endpoint discloses detail about service to unauthenticated users
Open Mainframe Project · Zowe
Medium5.3 - CVE-2024-9798
Health endpoint offers list of onboarded services to unauthenticated users
Open Mainframe Project · Zowe
Medium5.3 - CVE-2024-6916
Zowe CLI --show-inputs-only displays securely stored properties
Open Mainframe Project · Zowe CLI - Imperative
Medium5.9 - CVE-2024-6834
Imperative Local Command Injection allows Activity Masking
Open Mainframe Project · Zowe
Critical9.0 - CVE-2024-6833
Zowe CLI Auto-Init Leaks Credentials Locally
Open Mainframe Project · Zowe
Medium5.9 - CVE-2021-4326
Imperative Local Command Injection allows Activity Masking
Open Mainframe Project · Zowe
Low3.3 - CVE-2021-4314
It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT token as any user. This is happening only…
Open Mainframe Project · Zowe
Medium5.3