Skip to content
OpenAdvisories
Medium WID-SEC-2024-1090 1 CVE

IBM App Connect Enterprise: Schwachstelle ermöglicht Cross-Site Scripting

Published May 12, 2024 · Updated May 12, 2024 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 1

  • Medium 5.4
    CVE-2024-28761

    IBM App Connect Enterprise HTML injection

    IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security cont…

    IBM App Connect Enterprise

Revision history

  1. #1

    Initiale Fassung

References