PT-2025-11045 · Ibm · Ibm App Connect Enterprise Certified Container

Published 2025-03-12 · Updated 2025-04-02 · CVE-2024-52362

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: IBM App Connect Enterprise Certified Container versions 7.2 through 12.8

Description: The issue is due to improper validation of server-side input, which could allow an authenticated user to cause a denial of service in the App Connect flow.

Recommendations: For versions 7.2 through 12.8, update to a version that includes the fix for this issue to prevent denial of service attacks.

Fix

DoS

Weakness Enumeration

CWE-1286

Related Identifiers

CVE-2024-52362

Affected Products

Ibm App Connect Enterprise Certified Container

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-52362 · Security Note
• https://osv.dev/vulnerability/CVE-2024-52362 · Vendor Advisory
• https://t.me/cvenotify/117325 · Telegram Post
• https://ibm.com/support/pages/node/7185527 · Vendor Advisory, Patch