Medium severity · published Mar 12, 2025
CVE-2024-52362
IBM App Connect Enterprise Certified Container denial of service
6.5
CVSS
0.5%
EPSS
No
On KEV
Description
IBM App Connect Enterprise Certified Container 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, and 12.8 could allow an authenticated user to cause a denial of service in the App Connect flow due to improper validation of server-side input.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
App Connect Enterprise Certified Container · IBM
7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, 12.8 · source: vendor
AC
App Connect Enterprise Certified Containers Operands · Ibm
12.0.7.0; 12.0.12.5; 13.0.1.0; 13.0.2.1 · source: NVD
AC
App Connect Operator · Ibm
7.2 through 11.6.0; 12.0.0 before 12.9.0 ; 12.1.0 through 12.8.2; 12.0.12; 12.0.12 · source: NVD
Affected product
AC
App Connect Enterprise Certified Container
IBM
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-52362
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-52362
Vendor Advisory
https://www.ibm.com/support/pages/node/7185527
More from App Connect Enterprise Certified Container
9.1
CVE-2022-43916
IBM App Connect Enterprise Certified Container improper communications restriction
8.8
CVE-2024-51465
IBM App Connect Enterprise Certified Container command execution
8.1
CVE-2022-43915
IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12.1 does not limit…
6.5
CVE-2022-43922
IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in…
6.5
CVE-2022-22404
IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may be vulnerable to denial of service due…