Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.
[UPDATE] [hoch] IBM App Connect Enterprise: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-05 11:32 UTC
- Importiert: 2026-10-07 10:09 UTC
- Quelle-ID:
cert_bund - uid_hash:
c614417bc6a022216bb313b7e0517afe8bc3b80809b480c19b1797758eeaedae
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
HIGH |
7.5 |
2026-02-03 |
||||
HIGH |
MEDIUM |
5.3 |
2026-02-09 |
||||
HIGH |
HIGH |
7.5 |
2026-01-20 |
||||
HIGH |
MEDIUM |
5.9 |
2026-01-20 |
||||
HIGH |
MEDIUM |
5.9 |
2026-01-20 |
||||
HIGH |
MEDIUM |
6.1 |
2026-03-03 |
||||
HIGH |
HIGH |
7.1 |
2026-01-20 |
||||
HIGH |
HIGH |
7.1 |
2026-01-20 |
||||
HIGH |
LOW |
2.8 |
2026-01-20 |
||||
HIGH |
HIGH |
7.5 |
2026-01-20 |
||||
HIGH |
MEDIUM |
5.9 |
2026-01-20 |
||||
HIGH |
MEDIUM |
6.5 |
2026-01-10 |
||||
HIGH |
MEDIUM |
4 |
2026-01-26 |
||||
HIGH |
MEDIUM |
6.1 |
2026-03-03 |
||||
HIGH |
HIGH |
8.4 |
2026-01-14 |
||||
HIGH |
HIGH |
7.5 |
2026-01-15 |
||||
HIGH |
HIGH |
8.3 |
2026-02-27 |
||||
HIGH |
HIGH |
8.3 |
2026-02-03 |
||||
HIGH |
HIGH |
7.5 |
2026-02-03 |
||||
HIGH |
HIGH |
8.3 |
2026-02-03 |
||||
HIGH |
MEDIUM |
6 |
2026-01-23 |
||||
HIGH |
HIGH |
8.5 |
2026-02-03 |
||||
HIGH |
HIGH |
8.1 |
2026-02-02 |
||||
HIGH |
HIGH |
8.1 |
2026-02-02 |
||||
HIGH |
HIGH |
8 |
2026-03-26 |
||||
HIGH |
MEDIUM |
5.9 |
2026-01-20 |
||||
HIGH |
HIGH |
8 |
2026-01-10 |
||||
HIGH |
HIGH |
7.5 |
2026-01-16 |
||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
HIGH |
7.5 |
2026-03-06 |
||||
HIGH |
MEDIUM |
5.9 |
2026-03-06 |
||||
HIGH |
|||||||
HIGH |
HIGH |
8.7 |
2026-03-06 |
||||
HIGH |
|||||||
HIGH |
HIGH |
7.5 |
2026-03-18 |
||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
MEDIUM |
6.9 |
2026-03-08 |
||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
MEDIUM |
5.9 |
2026-03-30 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |