Skip to content
OpenAdvisories
High WID-SEC-2025-2681 3 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen

Published Nov 25, 2025 · Updated Nov 26, 2025 · Revision 2 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsmaßnahmen zu umgehen und Cross-Site-Scripting- oder Open-Redirect-Angriffe durchzuführen, einen Denial-of-Service-Zustand herbeizuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 3

  • High 8.6
    CVE-2025-57350

    CSVTOJSON has a prototype pollution vulnerability

    The csvtojson package, a tool for converting CSV data to JSON with customizable parsing capabilities, contains a prototype pollution vulnerability in versions prior to 2.0.10. This issue arises due to insufficient sanitization of nested header names during th…

    sqlpad csvtojson Wolfi npm
  • Medium 6.1
    CVE-2025-56200

    validator.js has a URL validation bypass vulnerability in its isURL function

    A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL() function uses '://' as a delimiter to parse protocols, while browsers use ':' as the delimiter. This parsing difference allows attackers to bypass protocol and …

    sqlpad saf validator validator.js Ubuntu Wolfi npm
  • Medium 6.1
    CVE-2025-64118

    node-tar vulnerable to race condition leading to uninitialized memory exposure

    node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { sync: true } to read tar entry contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while being read. This vulnerability is fixed in 7.5.2.

    isaacs node-tar renovate node-gyp Ubuntu Wolfi npm

Revision history

  1. #2

    Neue Updates von IBM aufgenommen

  2. #1

    Initiale Fassung

References