Skip to content
OpenAdvisories
Medium WID-SEC-2026-0903 3 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen ermöglichen Denial of Service

Published Mar 29, 2026 · Updated Apr 7, 2026 · Revision 2 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 3

  • High 8.7
    CVE-2026-2359

    Multer vulnerable to Denial of Service via resource exhaustion

    Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.0 allows an attacker to trigger a Denial of Service (DoS) by dropping connection during file upload, potentially causing resource exhaustion. Use…

    expressjs multer multer npm
  • High 8.7
    CVE-2026-3304 Public exploit

    Multer vulnerable to Denial of Service via incomplete cleanup

    Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.0 allows an attacker to trigger a Denial of Service (DoS) by sending malformed requests, potentially causing resource exhaustion. Users should up…

    expressjs multer multer npm
  • High 8.7
    CVE-2026-3520

    Multer vulnerable to Denial of Service via uncontrolled recursion

    Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.1 allows an attacker to trigger a Denial of Service (DoS) by sending malformed requests, potentially causing stack overflow. Users should upgrade…

    expressjs multer multer npm

Revision history

  1. #2

    Neue Updates von IBM aufgenommen

  2. #1

    Initiale Fassung

References