CVE-2023-37404

—

CVSS 3.1

9.8 critical

EPSS

<1%p54

Published

Oct 4, 2023 (Oct 4, 2023)

Modified

Jun 17, 2026

Description

IBM Observability with Instana 1.0.243 through 1.0.254 could allow an attacker on the network to execute arbitrary code on the host after a successful DNS poisoning attack. IBM X-Force ID: 259789.

Vendors: ibm
Products: observability with instana
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.