5.4
Moyenne
CVE-2024-28761 IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection
Description
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 285245.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| App Connect Enterprise 12.0 | 12.0.1.0 → 12.0.12.0 | Pas de correctif indiqué |
| App Connect Enterprise 11.0 | 11.0.0.1 → 11.0.0.25 | Pas de correctif indiqué |
Autres CVE de App Connect Enterprise
Les 34 CVE de App Connect Enterprise →
CVE-2026-92559
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due…
9.8
Critique
CVE-2026-17133
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
Élevée
CVE-2026-17156
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
Élevée
CVE-2026-17416
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
Élevée