CVSS 3.1
4.3 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NCVE-2024-31894
Medium (4.3) in ibm app connect enterprise. EPSS 0.3% chance of exploitation in the next 30 days.
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token. IBM X-Force ID: 288175.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-672, CWE-324
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:app_connect_enterprise