vulnerability

IBM AIX: python_advisory9 (CVE-2024-28757): Vulnerability in python affects AIX

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

Mar 10, 2024

Added

Jun 14, 2024

Modified

Mar 27, 2026

Description

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).

Solution

ibm-aix-python_advisory9

References

CVE-2024-28757
https://attackerkb.com/topics/CVE-2024-28757
CWE-776
EUVD-EUVD-2024-25843
https://aix.software.ibm.com/aix/efixes/security/python_advisory9.asc
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25843

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report