Ibm Integration Bus For Z Os vulnerabilities
12 known vulnerabilities affecting ibm/integration_bus_for_z_os.
Total CVEs
12
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM10
Vulnerabilities
Page 1 of 1
CVE-2026-81832P3HIGHCVSS 7.7≥ 10.1.0.0, ≤ 10.1.0.72026-09-04
CVE-2026-81832 [HIGH] CWE-611 CVE-2026-81832: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 SAP Adapter is vulnerable to an XML external entity (XXE) attack.
nvd
CVE-2026-78543P3HIGHCVSS 7.5≥ 10.1.0.0, ≤ 10.1.0.72026-09-04
CVE-2026-78543 [HIGH] CWE-835 CVE-2026-78543: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infinite loop.
nvd
CVE-2026-17443P3MEDIUMCVSS 6.5≥ 10.1.0.0, ≤ 10.1.0.72026-09-04
CVE-2026-17443 [MEDIUM] CWE-611 CVE-2026-17443: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
nvd
CVE-2026-17444P3MEDIUMCVSS 6.5≥ 10.1.0.0, ≤ 10.1.0.72026-09-04
CVE-2026-17444 [MEDIUM] CWE-611 CVE-2026-17444: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.
nvd
CVE-2024-22332P4MEDIUMCVSS 6.5≥ 10.1, ≤ 10.1.0.22024-02-09
CVE-2024-22332 [MEDIUM] CWE-400 CVE-2024-22332: The IBM Integration Bus for z/OS 10.1 through 10.1.0.2 AdminAPI is vulnerable to a denial of service
The IBM Integration Bus for z/OS 10.1 through 10.1.0.2 AdminAPI is vulnerable to a denial of service due to file system exhaustion. IBM X-Force ID: 279972.
nvd
CVE-2024-27265P4MEDIUMCVSS 6.5≥ 10.1, ≤ 10.1.0.32024-03-14
CVE-2024-27265 [MEDIUM] CWE-352 CVE-2024-27265: IBM Integration Bus for z/OS 10.1 through 10.1.0.3 is vulnerable to cross-site request forgery which
IBM Integration Bus for z/OS 10.1 through 10.1.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 284564.
nvd
CVE-2026-3602P4MEDIUMCVSS 5.5≥ 10.1.0.0, ≤ 10.1.0.72026-06-30
CVE-2026-3602 [MEDIUM] CWE-73 CVE-2026-3602: IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creating files they may not be aware of.
nvd
CVE-2026-16180P4MEDIUMCVSS 5.7≥ 10.1.0.0, ≤ 10.1.0.72026-09-04
CVE-2026-16180 [MEDIUM] CWE-776 CVE-2026-16180: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service condition due to improper validation of XML entities.
nvd
CVE-2026-19649P4MEDIUMCVSS 5.5≥ 10.1.0.0, ≤ 10.1.0.72026-09-04
CVE-2026-19649 [MEDIUM] CWE-532 CVE-2026-19649: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of database credentials.
nvd
CVE-2026-16689P4MEDIUMCVSS 5.5≥ 10.1.0.0, ≤ 10.1.0.72026-09-04
CVE-2026-16689 [MEDIUM] CWE-532 CVE-2026-16689: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of credentials.
nvd
CVE-2026-17442P4MEDIUMCVSS 5.5≥ 10.1.0.0, ≤ 10.1.0.72026-09-04
CVE-2026-17442 [MEDIUM] CWE-532 CVE-2026-17442: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext.
nvd
CVE-2026-17440P4MEDIUMCVSS 5.5≥ 10.1.0.0, ≤ 10.1.0.72026-09-04
CVE-2026-17440 [MEDIUM] CWE-674 CVE-2026-17440: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontrolled recursion.
nvd