Ibm App Connect Enterprise vulnerabilities
35 known vulnerabilities affecting ibm/app_connect_enterprise.
Total CVEs
35
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL4HIGH9MEDIUM22
Vulnerabilities
Page 2 of 2
CVE-2026-16180P4MEDIUMCVSS 5.7≥ 12.0.1.0, < 12.0.12.29≥ 13.0.1.0, < 13.0.8.2+2 more2026-09-04
CVE-2026-16180 [MEDIUM] CWE-776 CVE-2026-16180: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service condition due to improper validation of XML entities.
nvd
CVE-2026-19649P4MEDIUMCVSS 5.5≥ 12.0.1.0, < 12.0.12.29≥ 13.0.1.0, < 13.0.8.2+2 more2026-09-04
CVE-2026-19649 [MEDIUM] CWE-532 CVE-2026-19649: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of database credentials.
nvd
CVE-2026-16689P4MEDIUMCVSS 5.5≥ 12.0.1.0, < 12.0.12.29≥ 13.0.1.0, < 13.0.8.2+2 more2026-09-04
CVE-2026-16689 [MEDIUM] CWE-532 CVE-2026-16689: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of credentials.
nvd
CVE-2026-17442P4MEDIUMCVSS 5.5≥ 12.0.1.0, < 12.0.12.29≥ 13.0.1.0, < 13.0.8.2+2 more2026-09-04
CVE-2026-17442 [MEDIUM] CWE-532 CVE-2026-17442: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext.
nvd
CVE-2024-28761P4MEDIUMCVSS 5.4≥ 11.0.0.1, < 11.0.0.26≥ 12.0.1.0, < 12.0.12.1+2 more2024-05-14
CVE-2024-28761 [MEDIUM] CWE-79 CVE-2024-28761: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable t
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 285245.
nvd
CVE-2026-5515P4MEDIUMCVSS 5.5≥ 13.0.1.0, < 13.0.7.1≥ 13.0.1.0, ≤ 13.0.7.02026-05-27
CVE-2026-5515 [MEDIUM] CWE-922 CVE-2026-5515: IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be read by a local user.
nvd
CVE-2024-49338P4MEDIUMCVSS 4.9≥ 12.0.1.0, < 12.0.12.8v13.0.1.0+1 more2025-01-18
CVE-2024-49338 [MEDIUM] CWE-1323 CVE-2024-49338: IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could
IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged user to obtain JMS credentials.
nvd
CVE-2022-42439P4MEDIUMCVSS 4.9≥ 11.0.0.17, ≤ 11.0.0.19v12.0.4.0+3 more2023-02-06
CVE-2022-42439 [MEDIUM] CWE-200 CVE-2022-42439: IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspec
IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party system’s credentials to be exposed to a privileged attacker. IBM X-Force ID: 238211.
nvd
CVE-2024-22356P4MEDIUMCVSS 4.9≥ 11.0.0.1, < 11.0.0.24≥ 12.0.1.0, < 12.0.10.0+2 more2024-03-26
CVE-2024-22356 [MEDIUM] CWE-117 CVE-2024-22356: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1 through 10.1.0.2store potentially sensitive information in log or trace files that could be read by a privileged user. IBM X-Force ID: 280893.
nvd
CVE-2026-17440P4MEDIUMCVSS 5.5≥ 12.0.1.0, < 12.0.12.29≥ 13.0.1.0, < 13.0.8.2+2 more2026-09-04
CVE-2026-17440 [MEDIUM] CWE-674 CVE-2026-17440: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontrolled recursion.
nvd
CVE-2024-31893P4MEDIUMCVSS 4.3≥ 12.0.1.0, < 12.0.12.2≥ 12.0.1.0, ≤ 12.0.12.12024-05-22
CVE-2024-31893 [MEDIUM] CWE-324 CVE-2024-31893: IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain se
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive calendar information using an expired access token. IBM X-Force ID: 288174.
nvd
CVE-2024-31894P4MEDIUMCVSS 4.3≥ 12.0.1.0, < 12.0.12.2≥ 12.0.1.0, ≤ 12.0.12.12024-05-22
CVE-2024-31894 [MEDIUM] CWE-324 CVE-2024-31894: IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain se
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token. IBM X-Force ID: 288175.
nvd
CVE-2023-45176P4MEDIUMCVSS 5.5≥ 11.0.0.1, ≤ 11.0.0.23≥ 12.0.1.0, ≤ 12.0.10.02023-10-14
CVE-2023-45176 [MEDIUM] CWE-20 CVE-2023-45176: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integratio
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through 10.1.0.1 are vulnerable to a denial of service for integration nodes on Windows. IBM X-Force ID: 247998.
nvd
CVE-2024-28760P4MEDIUMCVSS 4.3≥ 11.0.0.1, < 11.0.0.26≥ 12.0.1.0, < 12.0.12.1+2 more2024-05-14
CVE-2024-28760 [MEDIUM] CWE-770 CVE-2024-28760: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 dashboard is vu
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 dashboard is vulnerable to a denial of service due to improper restrictions of resource allocation. IBM X-Force ID: 285244.
nvd
CVE-2023-40682P4MEDIUMCVSS 4.4≥ 12.0.1.0, < 12.0.9.0≥ 12.0.1.0, ≤ 12.0.8.02023-10-13
CVE-2023-40682 [MEDIUM] CWE-532 CVE-2023-40682: IBM App Connect Enterprise 12.0.1.0 through 12.0.8.0 contains an unspecified vulnerability that coul
IBM App Connect Enterprise 12.0.1.0 through 12.0.8.0 contains an unspecified vulnerability that could allow a local privileged user to obtain sensitive information from API logs. IBM X-Force ID: 263833.
nvd
← Previous2 / 2