Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.
[UPDATE] [hoch] IBM App Connect Enterprise: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-09-01 08:07 UTC
- Importiert: 2026-09-01 10:54 UTC
- CVSS: 9.1
- Quelle-ID:
cert_bund - uid_hash:
8909013c69bb8d83bde03eb9ca2a9d8c095ad3ab4f57fa7993e2cb91414481f6
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
CRITICAL |
9.1 |
HIGH |
7.5 |
2024-05-13 |
|||
CRITICAL |
9.1 |
MEDIUM |
5.5 |
2025-09-25 |
|||
CRITICAL |
9.1 |
HIGH |
7.5 |
2026-01-07 |
|||
CRITICAL |
9.1 |
MEDIUM |
4.4 |
2025-05-27 |
|||
CRITICAL |
9.1 |
LOW |
2.5 |
2025-06-16 |
|||
CRITICAL |
9.1 |
HIGH |
7.1 |
2025-12-03 |
|||
CRITICAL |
9.1 |
LOW |
3.7 |
2026-06-17 |
|||
CRITICAL |
9.1 |
HIGH |
7.5 |
2026-06-17 |
|||
CRITICAL |
9.1 |
HIGH |
8.7 |
2026-07-09 |
|||
CRITICAL |
9.1 |
HIGH |
7.5 |
2026-07-14 |
|||
CRITICAL |
9.1 |
HIGH |
7.5 |
2026-07-14 |
|||
CRITICAL |
9.1 |
MEDIUM |
5.9 |
2026-07-14 |
|||
CRITICAL |
9.1 |
MEDIUM |
6.5 |
2026-07-14 |
|||
CRITICAL |
9.1 |
HIGH |
7.5 |
2026-04-07 |
|||
CRITICAL |
9.1 |
HIGH |
7.5 |
2026-03-26 |
|||
CRITICAL |
9.1 |
HIGH |
7.6 |
2026-03-26 |
|||
CRITICAL |
9.1 |
HIGH |
7.5 |
2026-06-09 |
|||
CRITICAL |
9.1 |
HIGH |
7.4 |
2026-06-09 |
|||
CRITICAL |
9.1 |
CRITICAL |
9.1 |
2026-06-09 |
|||
CRITICAL |
9.1 |
HIGH |
7.5 |
2026-06-09 |
|||
CRITICAL |
9.1 |
HIGH |
8.1 |
2026-05-12 |
|||
CRITICAL |
9.1 |
HIGH |
7.5 |
2026-06-09 |
|||
CRITICAL |
9.1 |
MEDIUM |
5.9 |
2026-06-09 |
|||
CRITICAL |
9.1 |
MEDIUM |
5.9 |
2026-06-09 |
|||
CRITICAL |
9.1 |
LOW |
3.7 |
2026-06-09 |
|||
CRITICAL |
9.1 |
MEDIUM |
5.3 |
2026-06-09 |
|||
CRITICAL |
9.1 |
LOW |
3.7 |
2026-06-09 |
|||
CRITICAL |
9.1 |
MEDIUM |
6.2 |
2026-06-09 |
|||
CRITICAL |
9.1 |
HIGH |
7.5 |
2026-06-09 |
|||
CRITICAL |
9.1 |
MEDIUM |
4.8 |
2026-06-09 |
|||
CRITICAL |
9.1 |
HIGH |
8.8 |
2026-06-09 |
|||
CRITICAL |
9.1 |
HIGH |
7.4 |
2026-07-21 |
|||
CRITICAL |
9.1 |
MEDIUM |
5.9 |
2026-06-26 |
|||
CRITICAL |
9.1 |
HIGH |
7.7 |
2026-06-26 |
|||
CRITICAL |
9.1 |
MEDIUM |
5.3 |
2026-06-26 |
|||
CRITICAL |
9.1 |
HIGH |
7.8 |
2026-05-26 |
|||
CRITICAL |
9.1 |
MEDIUM |
4.2 |
2026-06-26 |
|||
CRITICAL |
9.1 |
MEDIUM |
5.6 |
2026-06-26 |
|||
CRITICAL |
9.1 |
HIGH |
7.5 |
2026-06-26 |
|||
CRITICAL |
9.1 |
MEDIUM |
4.3 |
2026-06-26 |
|||
CRITICAL |
9.1 |
LOW |
3.3 |
2026-06-26 |
|||
CRITICAL |
9.1 |
HIGH |
8.4 |
2026-06-29 |
|||
CRITICAL |
9.1 |
HIGH |
7.2 |
2026-06-29 |
|||
CRITICAL |
9.1 |
CRITICAL |
9.8 |
2026-04-20 |
|||
CRITICAL |
9.1 |
HIGH |
7.5 |
2026-06-30 |
|||
CRITICAL |
9.1 |
||||||
CRITICAL |
9.1 |
LOW |
3.7 |
2026-06-17 |
|||
CRITICAL |
9.1 |
HIGH |
7.5 |
2026-06-17 |
|||
CRITICAL |
9.1 |
HIGH |
8.1 |
2026-06-09 |
|||
CRITICAL |
9.1 |
HIGH |
8 |
2026-06-01 |
|||
CRITICAL |
9.1 |
HIGH |
7.5 |
2026-06-09 |
|||
CRITICAL |
9.1 |
MEDIUM |
5.9 |
2026-06-17 |
|||
CRITICAL |
9.1 |
HIGH |
7.4 |
2026-06-17 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
Amazon Linux Security Advisory ALAS2-2026-3876 vom 2026-09-01 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |