CVE-2024-52362: ibm app_connect_enterprise_certified_container
Vulnerability summary
CVE-2024-52362 is a medium (CVSS 6.5) vulnerability in ibm app_connect_enterprise_certified_container. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 40.2% of scored vulnerabilities.
Timeline
- 12-03-2025PublishedVulnerability first disclosed.
- 01-09-2025Last modifiedVulnerability information updated.
Description
IBM App Connect Enterprise Certified Container 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, and 12.8 could allow an authenticated user to cause a denial of service in the App Connect flow due to improper validation of server-side input.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LDiffers
EPSS trend
Probability
0.48%
Chance of exploitation in the next 30 days
Percentile
40%
Versus all other CVEs
30-day change
+0.01 pp
From 0.47% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ibm3 products
- app_connect_enterprise_certified_container7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, 12.8
- app_connect_enterprise_certified_containers_operands12.0.7.0:r4 | 12.0.12.5:r1 | 13.0.1.0:r1 | 13.0.2.1:r1
- app_connect_operator≥ 7.2, ≤ 11.6.0 | ≥ 12.0.0, < 12.9.0 | ≥ 12.1.0, ≤ 12.8.2 | 12.0.12:r1 | 12.0.12:r8
1 vendor · 3 products