Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM App Connect Enterprise — ibm.com/support/pages/node/7154606 Clear all filters
TI-2024-21005 CVE-2024-31894 · GHSA-qw7q-7pgr-v8ph

IBM App Connect Enterprise information disclosure

Priority LOW 20

IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00261 Published 2024-05-22 No fix listed CWE-324
TI-2024-21006 CVE-2024-31895 · GHSA-www9-grm3-8mc4

IBM App Connect Enterprise information disclosure

Priority LOW 29

IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00275 Published 2024-05-22 No fix listed CWE-324
TI-2024-21004 CVE-2024-31893 · GHSA-263c-689v-jcfh

IBM App Connect Enterprise information disclosure

Priority LOW 20

IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive calendar information using an expired access token.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00261 Published 2024-05-22 No fix listed CWE-324