{"id":"CVE-2022-22404","aliases":["EUVD-2022-27550","GHSA-qpv7-q7m6-j79v"],"status":"published","title":"IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified...","description":"IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may be vulnerable to denial of service due to excessive rate limiting.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/A:H/PR:L/S:U/AV:N/UI:N/AC:L/I:N/C:N/RC:C/RL:O/E:U","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-13","score":0.00979,"percentile":0.62736,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-770"],"published":"2022-04-01T16:45:31Z","modified":"2026-06-17T04:28:21Z","products":[{"vendor":"ibm","product":"app connect enterprise certified container"},{"vendor":"ibm","product":"app_connect_enterprise_certified_container"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6568359","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/222575","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22404"},{"url":"https://github.com/advisories/GHSA-qpv7-q7m6-j79v"}],"sources":{"cve":[{"id":"CVE-2022-22404","description":"IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may be vulnerable to denial of service due to excessive rate limiting.","status":"published","published":"2022-04-01T16:45:31.249Z","modified":"2024-09-16T19:15:51.585Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/A:H/PR:L/S:U/AV:N/UI:N/AC:L/I:N/C:N/RC:C/RL:O/E:U","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:34:26.293612Z"}],"euvd":[{"id":"EUVD-2022-27550","description":"IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may be vulnerable to denial of service due to excessive rate limiting.","status":"published","published":"2022-04-01T16:45:31Z","modified":"2024-09-16T19:15:51Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/A:H/PR:L/S:U/AV:N/UI:N/AC:L/I:N/C:N/RC:C/RL:O/E:U","level":"medium"}],"updated_at":"2026-11-03T00:55:24.213258Z"}],"ghsa":[{"id":"GHSA-qpv7-q7m6-j79v","title":"IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified...","description":"IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may be vulnerable to denial of service due to excessive rate limiting.","status":"published","published":"2022-04-02T00:00:13Z","modified":"2023-01-27T05:01:21Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:41:52.644766Z"}],"nvd":[{"id":"CVE-2022-22404","description":"IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may be vulnerable to denial of service due to excessive rate limiting.","status":"published","published":"2022-04-01T17:15:09.99Z","modified":"2026-06-17T04:28:21.34Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:07:14.706146Z"}]}}