Read the docs
TI-2022-06712 Aliases CVE-2022-22404GHSA-qpv7-q7m6-j79v

Resource allocation without limits in IBM App Connect Enterprise Certified Container

Priority LOW 31CWE-770Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-770.

Summary

IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may be vulnerable to denial of service due to excessive rate limiting.

Why it matters now

EPSS 0.00979 62nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
IBMApp Connect Enterprise Certified Container1.5; 2.0; 2.1; 3.0; 3.1—No fix listedCNA
  • App Connect Enterprise Certified Container VendorIBM Affected 1.5; 2.0; 2.1; 3.0; 3.1 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:*:*:*:*:*:*:*:*before 4.0.0VulnerableIBM
  • cpe:2.3:a:ibm:app_connect_enterprise_certified_container:*:*:*:*:*:*:*:* Versions before 4.0.0 Vulnerable ·IBM

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-22404
  2. 2026-10-03 Alias added: GHSA-qpv7-q7m6-j79v

References

Patch 1

  • TI-2024-34390 IBM App Connect Enterprise Certified Container command execution CVSS 3.1HIGH 8.8
  • TI-2022-21568 IBM App Connect Enterprise Certified Container improper communications restriction CVSS 3.1CRITICAL 9.1
  • TI-2022-21567 Incorrect permission assignment in IBM App Connect Enterprise Certified Container CVSS 3.1HIGH 8.1
  • TI-2022-20642 IBM App Connect Enterprise information disclosure CVSS 3.1MEDIUM 6.8
  • TI-2022-21572 IBM App Connect Enterprise Certified Container information disclosure CVSS 3.1MEDIUM 6.5
  • TI-2022-21545 Cross-site scripting in IBM App Connect Enterprise Certified Container CVSS 3.1MEDIUM 6.1
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences