Linuxfoundation Zowe Api Mediation Layer — known CVE vulnerabilities

Every CVE whose affected-product data names Linuxfoundation Zowe Api Mediation Layer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-9798 — CVSS 9.0 (critical): The health endpoint is public so everybody can see a list of all services. It is potentially valuable information for attackers.
• CVE-2021-4314 — CVSS 5.3 (medium): It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT token as any user…
• CVE-2024-9802 — CVSS 5.3 (medium): The conformance validation endpoint is public so everybody can verify the conformance of onboarded services. The response could contain…