CVEvulnerability

CVE-2024-52362

6.5 MEDIUM Published 2025-03-12 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-03-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-1286

Description

IBM App Connect Enterprise Certified Container 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, and 12.8 could allow an authenticated user to cause a denial of service in the App Connect flow due to improper validation of server-side input.

Affected configurations

• ibm app connect enterprise certified containers operands 12.0.7.0 • ibm app connect enterprise certified containers operands 12.0.12.5 • ibm app connect enterprise certified containers operands 13.0.1.0 • ibm app connect enterprise certified containers operands 13.0.2.1 • ibm app connect operator (>= 7.2 <= 11.6.0) • ibm app connect operator (>= 12.0.0 < 12.9.0 ) • ibm app connect operator (>= 12.1.0 <= 12.8.2) • ibm app connect operator 12.0.12

Related

Weakness · CWE (1)

  • CWE-1286 Improper Validation of Syntactic Correctness of Input weakness

References