Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um einen Cross-Site Scripting Angriff durchzuführen.
[UPDATE] [hoch] IBM App Connect Enterprise: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-16 10:36 UTC
- Importiert: 2026-10-19 13:09 UTC
- CVSS: 8.2
- Quelle-ID:
cert_bund - uid_hash:
9c60e21bd34c58f534207e5406786aeca0d3167baef78f2c689c9af265b10f2f
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
8.2 |
MEDIUM |
5.3 |
2022-08-13 |
|||
HIGH |
8.2 |
HIGH |
7.7 |
2026-06-30 |
|||
HIGH |
8.2 |
HIGH |
7.5 |
2026-07-23 |
|||
HIGH |
8.2 |
MEDIUM |
4.2 |
2026-07-29 |
|||
HIGH |
8.2 |
MEDIUM |
4.6 |
2026-03-12 |
|||
HIGH |
8.2 |
MEDIUM |
4.8 |
2026-07-29 |
|||
HIGH |
8.2 |
MEDIUM |
4.8 |
2026-07-29 |
|||
HIGH |
8.2 |
MEDIUM |
5.9 |
2026-09-04 |
|||
HIGH |
8.2 |
LOW |
3.7 |
2026-09-04 |
|||
HIGH |
8.2 |
HIGH |
7.5 |
2026-09-04 |
|||
HIGH |
8.2 |
MEDIUM |
6.3 |
2026-02-12 |
|||
HIGH |
8.2 |
MEDIUM |
6.6 |
2026-07-22 |
|||
HIGH |
8.2 |
MEDIUM |
6.9 |
2026-07-27 |
|||
HIGH |
8.2 |
MEDIUM |
6.1 |
2026-08-17 |
|||
HIGH |
8.2 |
HIGH |
8.2 |
2026-07-29 |
|||
HIGH |
8.2 |
HIGH |
8.2 |
2026-07-29 |
|||
HIGH |
8.2 |
HIGH |
7.5 |
2026-08-03 |
|||
HIGH |
8.2 |
HIGH |
7.7 |
2026-08-03 |
|||
HIGH |
8.2 |
MEDIUM |
6.9 |
2026-08-03 |
|||
HIGH |
8.2 |
HIGH |
7.5 |
2026-08-13 |
|||
HIGH |
8.2 |
HIGH |
7.5 |
2026-08-17 |
|||
HIGH |
8.2 |
HIGH |
7.5 |
2026-08-28 |
|||
HIGH |
8.2 |
LOW |
3.7 |
2026-08-28 |
|||
HIGH |
8.2 |
HIGH |
7.5 |
2026-08-28 |
|||
HIGH |
8.2 |
HIGH |
7.5 |
2026-08-28 |
|||
HIGH |
8.2 |
MEDIUM |
6.3 |
2026-08-29 |
|||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
HIGH |
7.5 |
2026-09-02 |
|||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
HIGH |
7.5 |
2026-09-01 |
|||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
HIGH |
7.4 |
2026-09-04 |
|||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
||||||
HIGH |
8.2 |
HIGH |
7.4 |
2026-09-04 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
Oracle Linux Security Advisory ELSA-2026-74085 vom 2026-10-09 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |