What is CVE-2024-47113?

CVE-2024-47113 is a high-severity vulnerability in Ibm Voice Gateway, classified under XML Injection (Blind XPath Injection). CVSS score: 8.1/10. Published 2025-01-18.

How severe is CVE-2024-47113?

High severity. CVSS v3 base score is 8.1 out of 10.

XPath Injection in Ibm Voice Gateway

CVE-2024-47113

IBM ICP - Voice Gateway 1.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5, 1.0.6. 1.0.7, 1.0.7.1, and 1.0.8 could allow remote attacker to send specially crafted XML statements, which would allow them to attacker to view or modify information in the XML document.

EPSS: 0.006 (44.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

Ibm Voice Gateway — versions 1.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5, 1.0.6. 1.0.7, 1.0.7.1, 1.0.8
Ibm Voice_gateway — versions 1.0.2, 1.0.2.4, 1.0.3

Weakness classification (CWE)

CWE-91 — XML Injection (Blind XPath Injection)

References

psirt@us.ibm.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-47113?: CVE-2024-47113 is a high-severity vulnerability in Ibm Voice Gateway, classified under XML Injection (Blind XPath Injection). CVSS score: 8.1/10. Published 2025-01-18.
How severe is CVE-2024-47113?: High severity. CVSS v3 base score is 8.1 out of 10.