Skip to content
OpenAdvisories
High WID-SEC-2026-0895 4 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen

Published Mar 26, 2026 · Updated Apr 19, 2026 · Revision 2 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, um beliebigen Programmcode auszuführen, und um einen Cross-Site Scripting Angriff durchzuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 4

  • Critical 9.8
    CVE-2026-1615

    jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions

    Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions. The library relies on the static-eval module to process JSON Path input, which is not designed to handle unt…

    jsonpath npm
  • High 8.1
    CVE-2026-33236

    NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite

    NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downloader does not validate the `subdir` and `id` att…

    nltk nltk nltk nltk Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-33231

    NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app

    NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, `nltk.app.wordnet_app` allows unauthenticated remote shutdown o…

    nltk nltk open-webui kubeflow-pipelines-visualization-server Debian Ubuntu Wolfi PyPI
  • Medium 6.1
    CVE-2026-33230

    nltk Vulnerable to Cross-site Scripting

    NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, `nltk.app.wordnet_app` contains a reflected cross-site scriptin…

    nltk nltk open-webui kubeflow-pipelines-visualization-server Debian Ubuntu Wolfi PyPI

Revision history

  1. #2

    Neue Updates von IBM aufgenommen

  2. #1

    Initiale Fassung

References