Vulnerability · Published Oct 4, 2023 · Assigned by ibm
CVE-2023-37404IBM Observability with Instana code execution
Medium 6.4
In plain English
A medium-severity security flaw in Observability with Instana from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Severity (CVSS 3.1)6.4Medium
Exploit odds (30 days)0.8%top 42.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM Observability with Instana 1.0.243 through 1.0.254 could allow an attacker on the network to execute arbitrary code on the host after a successful DNS poisoning attack. IBM X-Force ID: 259789.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Observability with Instana | 1.0.243 – through 1.0.254 |