Multiple Vulnerabilities in IBM App Connect Enterprise

IBM has released a security advisory regarding multiple vulnerabilities affecting IBM App Connect Enterprise. The identified vulnerabilities, tracked as CVE-2024-45090, CVE-2024-45091, CVE-2024-45092, CVE-2024-45093, and CVE-2024-45094, allow unauthenticated or authenticated attackers to compromise the integrity and availability of the application.

These flaws permit a wide range of malicious activities, including the bypassing of existing security controls, triggering denial-of-service (DoS) conditions that disrupt service availability, unauthorized information disclosure of sensitive data, arbitrary file manipulation, and the execution of cross-site scripting (XSS) attacks. Defenders should prioritize auditing instances of IBM App Connect Enterprise for these specific CVEs and ensure that security patches are applied to mitigate the risk of unauthorized access or service disruption.