Skip to content
OpenAdvisories
High WID-SEC-2025-1929 3 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen

Published Aug 28, 2025 · Updated Jan 25, 2026 · Revision 4 · de-DE

Vendor: IBM Product: App Connect Enterprise Product: Db2 Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 3

  • Critical 9.4
    CVE-2025-7783 Public exploit

    Usage of unsafe random function in form-data for choosing boundary

    Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

    katib-suggestion-hyperopt katib-earlystopping katib-suggestion-skopt-enas katib-suggestion-hyperband Debian Ubuntu Azure Linux Wolfi npm
  • High 7.5
    CVE-2025-7338 Public exploit

    Multer vulnerable to Denial of Service via unhandled exception from malformed request

    Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload requ…

    expressjs multer multer npm
  • Low 3.4
    CVE-2025-7339

    on-headers vulnerable to http response header manipulation

    on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `<1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to ve…

    jshttp on-headers katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm

Revision history

  1. #4

    Neue Updates von IBM aufgenommen

  2. #3

    Neue Updates von IBM aufgenommen

  3. #2

    Neue Updates von IBM aufgenommen

  4. #1

    Initiale Fassung

References