Skip to content
OpenAdvisories
Medium WID-SEC-2025-1420 2 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen

Published Jun 29, 2025 · Updated Oct 12, 2025 · Revision 3 · de-DE

Vendor: HCL Software Vendor: IBM Product: App Connect Enterprise Product: BigFix Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Dateien zu manipulieren, und um einen Denial of Service Angriff durchzuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 2

  • High 8.7
    CVE-2025-48387

    tar-fs has issue where extract can write outside the specified dir with a specific tarball

    tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside the specified dir with a specific tarball. This has been patched in versions 3.0.9, 2.1.3, and 1.16.5. As a workaro…

    Mafintosh tar-fs jitsucom-jitsu-console sqlpad Debian Ubuntu Azure Linux Wolfi npm
  • High 8.7
    CVE-2025-48997

    Multer vulnerable to Denial of Service via unhandled exception

    Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.1 allows an attacker to trigger a Denial of Service (DoS) by sending an upload file request with an emp…

    expressjs multer grafana-image-renderer multer Wolfi npm

Revision history

  1. #3

    Neue Updates von HCL aufgenommen

  2. #2

    Neue Updates von IBM aufgenommen

  3. #1

    Initiale Fassung

References