Skip to content
OpenAdvisories
Medium WID-SEC-2025-1388 2 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen ermöglichen Denial of Service

Published Jun 24, 2025 · Updated Oct 12, 2025 · Revision 3 · de-DE

Vendor: HCL Software Vendor: IBM Product: App Connect Enterprise Product: BigFix Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 2

  • High 7.5
    CVE-2025-47935

    Multer vulnerable to Denial of Service via memory leaks from unclosed streams

    Multer is a node.js middleware for handling `multipart/form-data`. Versions prior to 2.0.0 are vulnerable to a resource exhaustion and memory leak issue due to improper stream handling. When the HTTP request stream emits an error, the internal `busboy` stream…

    expressjs multer grafana-image-renderer multer Wolfi npm
  • High 7.5
    CVE-2025-47944

    Multer vulnerable to Denial of Service from maliciously crafted requests

    Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.0 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload requ…

    expressjs multer grafana-image-renderer multer Wolfi npm

Revision history

  1. #3

    Neue Updates von HCL aufgenommen

  2. #2

    Neue Updates von IBM aufgenommen

  3. #1

    Initiale Fassung

References