CVE-2024-52362

EPSS 0.46%
Veröffentlicht 12.03.2025 14:04:10
Zuletzt bearbeitet 02.04.2025 12:37:19
Erkennungen
Login

IBM App Connect Enterprise Certified Container denial of service

IBM App Connect Enterprise Certified Container 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, and 12.8 could allow an authenticated user to cause a denial of service in the App Connect flow due to improper validation of server-side input.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 9 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.7.0 Update r4 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.5 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.1.0 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.2.1 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Operator SwEdition continuous_delivery Version >= 7.2 <= 11.6.0

Ibm ≫ App Connect Operator SwEdition lts Version >= 12.0.0 < 12.9.0

Ibm ≫ App Connect Operator SwEdition continuous_delivery Version >= 12.1.0 <= 12.8.2

Ibm ≫ App Connect Operator Version 12.0.12 Update r1 SwEdition lts

Ibm ≫ App Connect Operator Version 12.0.12 Update r8 SwEdition lts

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.46%	0.379

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
IBM	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-1286 Improper Validation of Syntactic Correctness of Input

The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.

https://www.ibm.com/support/pages/node/7185527

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-52362

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-52362

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-52362

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-52362