CVE-2025-1993 in App Connect Enterprise Certified Container

Résumé

par MITRE • 09/05/2025

BM App Connect Enterprise Certified Container 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, 12.8, 12.9, and 12.10 DesignerAuthoring instances store their flows in a database that is protected by weaker than expected cryptographic algorithms that could be decrypted by a local user.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: Ibm
• Réserver: 05/03/2025
• Divulgation: 09/05/2025
• Modérer: accepté
• Entrée: VDB-308258
• CPE: prêt
• CWE: CWE-521 (confirmé)
• CVSS: 5.5 (NVD)
• EPSS: 0.00117
• KEV: non
• Activités: très faible
• Secteur: Lawfirm, Chemical, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-1993
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-1993
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-1993/