SB2026060904 - IBM Sterling Connect:Direct Web Services update for Spring MVC and WebFlux

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026060904

SB2026060904 - IBM Sterling Connect:Direct Web Services update for Spring MVC and WebFlux

Published: June 9, 2026

Security Bulletin ID SB2026060904
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Partial DoS

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Resource exhaustion (CVE-ID: CVE-2026-22745)

CWE-ID: CWE-400 - Resource exhaustion

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to uncontrolled resource consumption in static resource handling when resolving static resources from the file system on Windows platforms. A remote attacker can send malicious requests that are slow to resolve to cause a denial of service.

The issue affects applications using Spring MVC or Spring WebFlux that serve static resources from the file system on Windows platforms.


Remediation

Install update from vendor's website.

References