IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading service.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00122.

Exploitation none

Automatable yes

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
IBM InfoSphere Data Replication VSAM for z/OS Remote Source unaffected
Version Status Constraints
11.4 affected
—

Configuration 1 [-]

cpe:2.3:a:ibm:infosphere_data_replication:11.4.0:*:*:*:*:*:*:*

No data.

No data.

Subscriptions

Vendors Products
Ibm Subscribe
Infosphere Data Replication Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-54765 IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading service.
Fixes

Solution

IBM InfoSphere Data Replication VSAM for z/OS Remote Source - Log Reader Service 11.4 Download from https://www.ibm.com/docs/en/idr/11.4.0?topic=source-installing-vsam-remote

Workaround

No workaround given by the vendor.

References
Link Providers
https://www.ibm.com/support/pages/node/7239221 cve-icon cve-icon
History

Wed, 20 Aug 2025 20:00:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:ibm:infosphere_data_replication:11.4.0:*:*:*:*:*:*:*

Mon, 14 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00094}

 epss

{'score': 0.00123}

Wed, 09 Jul 2025 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 08 Jul 2025 23:00:00 +0000

Type Values Removed Values Added
Description IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading service.
Title IBM InfoSphere Data Replication VSAM for z/OS Remote Source denial of service
First Time appeared Ibm
Ibm infosphere Data Replication
Weaknesses CWE-121
CPEs cpe:2.3:a:ibm:infosphere_data_replication:11.4:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm infosphere Data Replication
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2025-08-24T11:20:33.902Z

Reserved: 2024-12-26T12:51:26.633Z

Link: CVE-2024-56468

cve-icon Vulnrichment

Updated: 2025-07-09T18:38:46.986Z

cve-icon NVD

Status : Analyzed

Published: 2025-07-08T23:15:22.840

Modified: 2025-08-20T19:49:20.127

Link: CVE-2024-56468

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses