VULNERABILITY INTELLIGENCE

CVE-2025-1993

CVSS score5.1 MEDIUM
EPSS probability0.13%
CISA KEVNot currently listed
Published2025-05-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

IBM App Connect Enterprise Certified Container 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, 12.8, 12.9, and 12.10 DesignerAuthoring instances store their flows in a database that is protected by weaker than expected cryptographic algorithms that could be decrypted by a local user.

Weakness classification

  • psirt@us.ibm.com: CWE-521
  • nvd@nist.gov: CWE-521

Primary references