CVE-2025-13491: falha de média gravidade em IBM App Connect Enterprise Certified Container
IBM App Connect Enterprise Certified Container Information Disclosure
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.1epss 0.2%
IBM App Connect Enterprise Certified Container CD: 11.2.0 through 11.6.0, 12.1.0 through 12.19.0 and 12.0 LTS: 12.0.0 through 12.0.19 could allow an attacker to access sensitive files or modify configurations due to an untrusted search path.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
IBM · App Connect Enterprise Certified ContainerCVEs relacionadas — IBM App Connect Enterprise Certified Container
No mesmo produto, das mais perigosas para as menos.
CVE-2022-22404MEDIUMCVE-2022-22404EPSS 1.0%CVE-2022-31770MEDIUMCVE-2022-31770EPSS 0.9%CVE-2020-4785MEDIUMCVE-2020-4785EPSS 0.7%CVE-2024-51465HIGHIBM App Connect Enterprise Certified Container command executionEPSS 0.7%CVE-2024-52362MEDIUMIBM App Connect Enterprise Certified Container denial of serviceEPSS 0.5%CVE-2022-43874MEDIUMIBM App Connect Enterprise Certified ContainerEPSS 0.4%