Vulnerability · Published Sep 10, 2025 · Assigned by ibm
CVE-2024-47120IBM Security Verify Information Queue code execution
Medium 6.4
In plain English
A medium-severity security flaw in Security Verify Information Queue from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Severity (CVSS 3.1)6.4Medium
Exploit odds (30 days)0.2%top 89.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a privileged user to escalate their privileges and attack surface on the host due to the containers running with unnecessary privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Security Verify Information Queue | 10.0.510.0.610.0.710.0.8 |
Weakness: CWE-250 · Vector: CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
References
- https://www.ibm.com/support/pages/node/7244514 vendor-advisory, patch