Vulnerability · Published Jul 10, 2025 · Assigned by ibm
CVE-2024-39752IBM Analytics Content Hub file upload
Medium 6.8
In plain English
A medium-severity unrestricted file upload in Analytics Content Hub from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).
Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.3%top 74.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validating the type of file uploaded to Explore Content. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Analytics Content Hub | 2.0, 2.1, 2.2, 2.3 |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
References
- https://www.ibm.com/support/pages/node/7234122 vendor-advisory, patch