CVSS: 6.2EPSS: 0%CPEs: 3EXPL: 0CVE-2023-45176 – IBM App Connect Enterprise and IBM Integration Bus denial of service
https://notcve.org/view.php?id=CVE-2023-45176
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through 10.1.0.1 are vulnerable to a denial of service for integration nodes on Windows. IBM X-Force ID: 247998. IBM App Connect Enterprise 11.0.0.1 a 11.0.0.23, 12.0.1.0 a 12.0.10.0 e IBM Integration Bus 10.1 a 10.1.0.1 son vulnerables a una Denegación de Servicio (DoS) para los nodos de integración en Windows. ID de IBM X-Force: 247998. • https://exchange.xforce.ibmcloud.com/vulnerabilities/267998 https://www.ibm.com/support/pages/node/7051448 • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0CVE-2022-42444 – IBM App Connect Enterprise denial of service
https://notcve.org/view.php?id=CVE-2022-42444
IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user could overflow a buffer and cause the application to crash. IBM X-Force ID: 238538. • https://exchange.xforce.ibmcloud.com/vulnerabilities/238538 https://www.ibm.com/support/pages/node/6890609 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 6.8EPSS: 0%CPEs: 13EXPL: 0CVE-2022-42439 – IBM App Connect Enterprise information disclosure
https://notcve.org/view.php?id=CVE-2022-42439
IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party system’s credentials to be exposed to a privileged attacker. IBM X-Force ID: 238211. • https://exchange.xforce.ibmcloud.com/vulnerabilities/238211 https://www.ibm.com/support/pages/node/6952435 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-532: Insertion of Sensitive Information into Log File •