Vulnerability · Published Jul 10, 2025 · Assigned by ibm

CVE-2024-38327IBM Analytics Content Hub information disclosure

Medium 6.8

In plain English

A medium-severity security flaw in Analytics Content Hub from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).

Severity (CVSS 3.1)6.8Medium

Exploit odds (30 days)0.3%top 74.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker to read and debug JavaScript used in the application's API.

Affected products (as reported)

Vendor	Product	Versions
IBM	Analytics Content Hub	2.0, 2.1, 2.2, 2.3

Weakness: CWE-540 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

References

https://www.ibm.com/support/pages/node/7234122 vendor-advisory, patch