CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2024-31904 – IBM App Connect Enterprise denial of service
https://notcve.org/view.php?id=CVE-2024-31904
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 integration nodes could allow an authenticated user to cause a denial of service due to an uncaught exception. IBM X-Force ID: 289647. Los nodos de integración de IBM App Connect Enterprise 11.0.0.1 a 11.0.0.25 y 12.0.1.0 a 12.0.12.0 podrían permitir que un usuario autenticado provoque una denegación de servicio debido a una excepción no detectada. ID de IBM X-Force: 289647. • https://exchange.xforce.ibmcloud.com/vulnerabilities/289647 https://www.ibm.com/support/pages/node/7154607 • CWE-248: Uncaught Exception •
CVSS: 4.4EPSS: 0%CPEs: 1EXPL: 0CVE-2023-47717 – IBM Security Guardium denial of service
https://notcve.org/view.php?id=CVE-2023-47717
IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service. IBM X-Force ID: 271690. IBM Security Guardium 12.0 podría permitir que un usuario privilegiado realice acciones no autorizadas que podrían provocar una denegación de servicio. ID de IBM X-Force: 271690. • https://exchange.xforce.ibmcloud.com/vulnerabilities/271690 https://www.ibm.com/support/pages/node/7152469 •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2024-28760 – IBM App Connect Enterprise denial of service
https://notcve.org/view.php?id=CVE-2024-28760
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 dashboard is vulnerable to a denial of service due to improper restrictions of resource allocation. IBM X-Force ID: 285244. El panel de IBM App Connect Enterprise 11.0.0.1 a 11.0.0.25 y 12.0.1.0 a 12.0.12.0 es vulnerable a una denegación de servicio debido a restricciones inadecuadas de asignación de recursos. ID de IBM X-Force: 285244. • https://exchange.xforce.ibmcloud.com/vulnerabilities/285244 https://www.ibm.com/support/pages/node/7150845 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0CVE-2024-28761 – IBM App Connect Enterprise HTML injection
https://notcve.org/view.php?id=CVE-2024-28761
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 285245. IBM App Connect Enterprise 11.0.0.1 a 11.0.0.25 y 12.0.1.0 a 12.0.12.0 es vulnerable a la inyección de HTML. Un atacante remoto podría inyectar código HTML malicioso que, una vez visto, se ejecutaría en el navegador web de la víctima dentro del contexto de seguridad del sitio de alojamiento. • https://exchange.xforce.ibmcloud.com/vulnerabilities/285245 https://www.ibm.com/support/pages/node/7150847 •
CVSS: 6.2EPSS: 0%CPEs: 1EXPL: 0CVE-2024-22345 – IBM TXSeries for Multiplatforms information disclosure
https://notcve.org/view.php?id=CVE-2024-22345
IBM TXSeries for Multiplatforms 8.2 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. IBM X-Force ID: 280192. IBM TXSeries for Multiplatforms 8.2 transmite o almacena credenciales de autenticación, pero utiliza un método inseguro que es susceptible de interceptación y/o recuperación no autorizada. ID de IBM X-Force: 280192. • https://exchange.xforce.ibmcloud.com/vulnerabilities/280192 https://www.ibm.com/support/pages/node/7150667 • CWE-522: Insufficiently Protected Credentials •