App Connect Enterprise

app_connect_enterprise

Vendor: Ibm • 31 CVEs

CVEs (31)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-75624 1Ibm 1App Connect Enterprise Sep 16, 2026 Sep 10, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to incorrect authorization.
CVE-2026-17444 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 10, 2026 Sep 4, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.Show less
CVE-2026-17443 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 9, 2026 Sep 4, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.Show less
CVE-2026-17442 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 10, 2026 Sep 4, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credent...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext.Show less
CVE-2026-17440 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 9, 2026 Sep 4, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontroll...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontrolled recursion.Show less
CVE-2026-16689 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 8, 2026 Sep 4, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to imprope...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of credentials.Show less
CVE-2026-16180 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 9, 2026 Sep 4, 2026 N/A· v4 5.7 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service cond...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service condition due to improper validation of XML entities.Show less
CVE-2026-78543 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 9, 2026 Sep 4, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infini...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infinite loop.Show less
CVE-2026-19649 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 9, 2026 Sep 4, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to imprope...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of database credentials.Show less
CVE-2026-81832 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 8, 2026 Sep 4, 2026 N/A· v4 7.7 HIGH· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 SAP Adapter is vulnerable to an XML external entity (XXE) attack.
CVE-2026-15435 1Ibm 1App Connect Enterprise Oct 23, 2026 Jul 30, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.Show less
CVE-2026-14522 1Ibm 1App Connect Enterprise Oct 23, 2026 Jul 30, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters.
CVE-2026-14519 1Ibm 1App Connect Enterprise Oct 23, 2026 Jul 30, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to read arbitrary files due to a path traversal vulnerability.
CVE-2026-12947 1Ibm 1App Connect Enterprise Oct 23, 2026 Jul 30, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive information in log files that could be read by a local user.
CVE-2026-3602 1Ibm 2App Connect Enterprise Integration Bus Jul 20, 2026 Jun 30, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creating files they may not be aware of.Show less
CVE-2026-5515 1Ibm 1App Connect Enterprise Oct 14, 2026 May 27, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be read by a local user.
CVE-2025-36361 1Ibm 1App Connect Enterprise Jun 17, 2026 Oct 24, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization.
CVE-2025-0799 1Ibm 1App Connect Enterprise Jun 17, 2026 Feb 6, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM App Connect enterprise 12.0.1.0 through 12.0.12.10 and 13.0.1.0 through 13.0.2.1 could allow an authenticated user to write to an arbitrary file on the system during bar configuration deployment due to improper pathn...Show more IBM App Connect enterprise 12.0.1.0 through 12.0.12.10 and 13.0.1.0 through 13.0.2.1 could allow an authenticated user to write to an arbitrary file on the system during bar configuration deployment due to improper pathname limitations on restricted directories.Show less
CVE-2024-49338 1Ibm 1App Connect Enterprise Jun 17, 2026 Jan 18, 2025 N/A· v4 4.9 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged user to obtain JMS credentials.
CVE-2024-31895 1Ibm 1App Connect Enterprise Jun 17, 2026 May 22, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token. IBM X-Force ID: 288176.

12 Next