Skip to content
OpenAdvisories
High WID-SEC-2025-0659 2 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen

Published Mar 30, 2025 · Updated May 11, 2025 · Revision 4 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um beliebigen Code auszuführen und Sicherheitsmaßnahmen zu umgehen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 2

  • Critical 9.8
    CVE-2025-1302 Public exploit Scanner template EPSS 10%

    JSONPath Plus allows Remote Code Execution

    Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode. **Note:** T…

    katib-suggestion-hyperopt katib-earlystopping katib-suggestion-pbt-enas katib-suggestion-hyperband Wolfi npm
  • Medium 4.4
    CVE-2025-24791

    snowflake-connector-nodejs has incorrect validation of temporary credential cache file permissions

    snowflake-connector-nodejs is a NodeJS driver for Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake NodeJS Driver. File permissions checks of the temporary credential cache could be bypassed by an attacker with write access to th…

    snowflakedb snowflake-connector-nodejs snowflake-sdk npm

Revision history

  1. #4

    Neue Updates von IBM aufgenommen

  2. #3

    Neue Updates von IBM aufgenommen

  3. #2

    Text angepasst

  4. #1

    Initiale Fassung

References