vulnerability

IBM AIX: python_advisory9 (CVE-2024-28757): Vulnerability in python affects AIX

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
1	(AV:N/AC:L/Au:N/C:N/I:N/A:N)	03/10/2024	06/14/2024	02/28/2025

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:N)

Published

03/10/2024

Added

06/14/2024

Modified

02/28/2025

Description

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).

Solution

ibm-aix-python_advisory9

References

CVE-2024-28757
https://attackerkb.com/topics/CVE-2024-28757
URL-https://aix.software.ibm.com/aix/efixes/security/python_advisory9.asc

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today