{"items":[{"id":"CVE-2024-9802","published":"2024-10-10T07:41:03.374Z","updated":"2024-10-10T14:22:43.244Z","title":"Conformance validation endpoint discloses detail about service to unauthenticated users","severity":"MEDIUM","score":5.3,"vendor":"Open Mainframe Project","product":"Zowe","kev":false,"epss":0.00205,"kevAdded":null},{"id":"CVE-2024-9798","published":"2024-10-10T07:29:10.066Z","updated":"2024-10-10T14:21:58.664Z","title":"Health endpoint offers list of onboarded services to unauthenticated users","severity":"MEDIUM","score":5.3,"vendor":"Open Mainframe Project","product":"Zowe","kev":false,"epss":0.00233,"kevAdded":null},{"id":"CVE-2024-6916","published":"2024-07-19T10:47:07.892Z","updated":"2024-08-01T21:45:38.247Z","title":"Zowe CLI --show-inputs-only displays securely stored properties","severity":"MEDIUM","score":5.9,"vendor":"Open Mainframe Project","product":"Zowe CLI - Imperative","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2024-6834","published":"2024-07-17T14:44:06.283Z","updated":"2024-08-13T21:00:07.595Z","title":"Imperative Local Command Injection allows Activity Masking","severity":"CRITICAL","score":9,"vendor":"Open Mainframe Project","product":"Zowe","kev":false,"epss":0.00263,"kevAdded":null},{"id":"CVE-2024-6833","published":"2024-07-17T14:41:37.598Z","updated":"2024-08-01T21:45:38.354Z","title":"Zowe CLI Auto-Init Leaks Credentials Locally","severity":"MEDIUM","score":5.9,"vendor":"Open Mainframe Project","product":"Zowe","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2021-4326","published":"2023-02-22T15:21:06.657Z","updated":"2024-08-03T17:23:10.539Z","title":"Imperative Local Command Injection allows Activity Masking","severity":"LOW","score":3.3,"vendor":"Open Mainframe Project","product":"Zowe","kev":false,"epss":0.00255,"kevAdded":null},{"id":"CVE-2021-4314","published":"2023-01-18T15:23:42.797Z","updated":"2025-04-03T19:48:49.004Z","title":"It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT token as any user. This is happening only…","severity":"MEDIUM","score":5.3,"vendor":"Open Mainframe Project","product":"Zowe","kev":false,"epss":0.00454,"kevAdded":null}]}