Vulnerability Details CVE-2024-52362
IBM App Connect Enterprise Certified Container 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, and 12.8 could allow an authenticated user to cause a denial of service in the App Connect flow due to improper validation of server-side input.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.4%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2024-52362
-
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.5
-
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.7.0
-
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.1.0
-
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.2.1
-
cpe:2.3:a:ibm:app_connect_operator:*
-
cpe:2.3:a:ibm:app_connect_operator:11.6.0
-
cpe:2.3:a:ibm:app_connect_operator:12.0.12
-
cpe:2.3:a:ibm:app_connect_operator:12.1.0
-
cpe:2.3:a:ibm:app_connect_operator:12.8.2
-
cpe:2.3:a:ibm:app_connect_operator:8.1.0