Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Daten zu manipulieren, und um einen Denial of Service Angriff durchzuführen.
Product
IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.
Vulnerabilities 2
-
High 7.5
Axios is vulnerable to DoS attack through lack of data size check
Axios is a promise based HTTP client for the browser and Node.js. When Axios starting in version 0.28.0 and prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapte…
-
Medium 4.3
Ed25519 Signature Malleability in ed25519-java Due to Missing Scalar Range Check
The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA (Strong Existential Unforgeability under Chosen Message Attacks) property. This allows attackers to create new valid si…
Revision history
-
#3
Neue Updates von IBM aufgenommen
-
#2
Neue Updates von IBM aufgenommen
-
#1
Initiale Fassung
References
-
IBM Security Bulletin vom 2025-09-30
https://www.ibm.com/support/pages/node/7246664
-
IBM Security Bulletin vom 2025-09-30
https://www.ibm.com/support/pages/node/7246662
-
IBM Security Bulletin 7248127 vom 2025-10-16
https://www.ibm.com/support/pages/node/7248127
-
IBM Security Bulletin 7249810 vom 2025-10-31
https://www.ibm.com/support/pages/node/7249810