← Back

CVE-2024-52362

nvd nist
Published: Mar 12, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

IBM App Connect Enterprise Certified Container 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, and 12.8 could allow an authenticated user to cause a denial of service in the App Connect flow due to improper validation of server-side input.

Affected (9)

Ibm
2 products
App Connect Enterprise Certified Containers Operands
App Connect Operator
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
App Connect Enterprise Certified Containers Operands
Version 12.0.12.5 r1
App Connect Enterprise Certified Containers Operands
Version 12.0.7.0 r4
App Connect Enterprise Certified Containers Operands
Version 13.0.1.0 r1
App Connect Enterprise Certified Containers Operands
Version 13.0.2.1 r1
Ibm
App Connect Operator
From 12.1.0 to 12.8.2
App Connect Operator
From 7.2 to 11.6.0
App Connect Operator
From 12.0.0 to 12.9.0
App Connect Operator
Version 12.0.12 r1
App Connect Operator
Version 12.0.12 r8

Related CWEs

CWE-1286
Improper Validation of Syntactic Correctness of Input
The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.