Integration Bus For Z/os

integration_bus_for_z/os

Vendor: Ibm • 9 CVEs

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-17444 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 10, 2026 Sep 4, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.Show less
CVE-2026-17443 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 9, 2026 Sep 4, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.Show less
CVE-2026-17442 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 10, 2026 Sep 4, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credent...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext.Show less
CVE-2026-17440 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 9, 2026 Sep 4, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontroll...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontrolled recursion.Show less
CVE-2026-16689 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 8, 2026 Sep 4, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to imprope...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of credentials.Show less
CVE-2026-16180 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 9, 2026 Sep 4, 2026 N/A· v4 5.7 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service cond...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service condition due to improper validation of XML entities.Show less
CVE-2026-78543 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 9, 2026 Sep 4, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infini...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infinite loop.Show less
CVE-2026-19649 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 9, 2026 Sep 4, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to imprope...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of database credentials.Show less
CVE-2026-81832 1Ibm 2App Connect Enterprise Integration Bus For Z/os Sep 8, 2026 Sep 4, 2026 N/A· v4 7.7 HIGH· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 SAP Adapter is vulnerable to an XML external entity (XXE) attack.