CVE-2024-28765
📛 CVE Title
(no title)
Description
IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Overview
- State
- —
- Assigner (CNA)
- —
- CVSS severity
- medium
- CVSS score
- 5.3 / 10
- CVSS vector
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N- Effective score
- 5.3 / 10 MEDIUM source: CNA overview
- CWE(s)
- —
- Reserved
- —
- Published
- —
- Last updated
- —
- Source
- https://www.tenable.com/cve/CVE-2024-28765
NVD triage scoring NVD CVE 2.0
Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.
- NVD published
- 2026-05-27 14:16:40 UTC
- NVD last modified
- 2026-06-17 07:21:45 UTC
- NVD CVSS v3.1
- 5.3 / 10 MEDIUM source: psirt@us.ibm.com
- NVD CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N- Exploitability subscore
- 3.9 / 10
- Impact subscore
- 1.4 / 10
- EPSS score
- 0.0039 (probability of exploitation in next 30 days)
- EPSS percentile
- 31.24% vs all CVEs — higher = more likely to be exploited, as of 2026-08-01
NVD-assigned CWE(s):
CWE-209
(differs from the CNA list above)
NVD / KEV / EPSS data refreshed 2026-08-01 16:28 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2024-55599 - Assigner
- ibm
- Published
- May 27, 2026, 1:47:21 PM
- Updated
- May 28, 2026, 3:39:51 PM
- EUVD base score (CVSS 3.1)
-
5.3 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - EUVD-reported EPSS
- 0.3900
- Vendors
- IBM
- Products
-
SDI (7.2.0.0 ≤7.2.0.14)Security Directory Integrator (10.0.0.0 ≤10.0.0.2)
- Aliases
-
GHSA-9922-6vmq-8fjg
ENISA description: IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
EUVD references (1)
Affected products — CPE 2.3 (1) NVD
NVD's normalized CPE 2.3 matchers, used by vendor tools (vulnerability scanners, asset managers) for automated detection. Compare with the CNA's free-text "Affected products" section above.
cpe:2.3:a:ibm:security_directory_integrator:*:*:*:*:*:*:*:*
Vendor references (0)
References embedded in the original CVE record by the assigning CNA.
None in the CVE record.
Web references (4)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
- https://nvd.nist.gov/vuln/detail/CVE-2024-28765 tenable:nvd.nist.gov
- https://www.cve.org/CVERecord?id=CVE-2024-28765 tenable:www.cve.org
- https://www.first.org/epss/ tenable:www.first.org
- https://www.ibm.com/support/pages/node/7268903 tenable:www.ibm.com
NVD-tagged references (1)
Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.
- https://www.ibm.com/support/pages/node/7268903 psirt@us.ibm.com Vendor Advisory
Remediations (10)
-
web:catalog.update.microsoft.com
Welcome to the Microsoft Update Catalog site. We want your feedback! Visit our newsgroup or send us an email to provide us with your thoughts and suggestions. To get started using the site, enter in your search terms in the Search box above or visit our FAQ for search tips. |Newsgroup|Send us your feedback Accessibilité : partiellement conforme
2026-06-19 02:54 UTC -
web:en-forum.guildwars2.com
05/12/2026—May 12 Release Notes Note to users of third-party programs: The game may not launch or work properly after we release a new build if you use a third-party program, due to possible incompatibilities. ArenaNet cannot offer support if a third-party modification breaks, interferes with, or ...
2026-06-19 02:54 UTC -
web:gemini.google.com
Get assistance with writing, planning, learning, and more from Google AI.
2026-06-19 02:54 UTC -
web:hazards.fema.gov
Access the FEMA Mitigation Planning Portal to manage and update your mitigation plans securely.
2026-06-19 02:54 UTC -
web:u.jd.com
u.jd.com
2026-06-19 02:54 UTC -
web:u.jd.com
u.jd.com
2026-06-19 02:54 UTC -
web:wa.me
Hosted by WhatsApp 2026 © WhatsApp LLC Privacy & Terms
2026-06-19 02:54 UTC -
web:www.grammarly.com
Grammarly makes AI writing convenient. Work smarter with personalized AI guidance and text generation on any app or website.
2026-06-19 02:54 UTC -
web:www.patioproducts.com
45 vinyl strap colors of vinyl strapping for outdoor patio furniture. Straps pre-cut to size, by the foot, by the roll or by the pallet.
2026-06-19 02:54 UTC -
web:www.youtube.com
#shorts #minecraftmemes #minecraft If playback doesn't begin shortly, try restarting your device.
2026-06-19 02:54 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.