Login Request a demo
AC
Product
App Connect Enterprise
by IBM · last CVE Oct 20, 2026
35
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities35In the news0Timeline
Severity mix
Critical 4High 9Medium 22Low 0
Severity
All severities35Critical4High9Medium22Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add App Connect Enterprise to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92559
9.8
1%
Oct 20
IBM App Connect Enterprise is vulnerable to a credential exposure
Affected: 13.0.1.0 through 13.0.8.2
CVE-2026-15435
9.8
1%
Jul 30
IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability
Affected: 13.0.1.0 through 13.0.7.2; 12.0.1.0 through 12.0.12.27
CVE-2026-14522
9.8
1%
Jul 30
IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
Affected: 13.0.1.0 through 13.0.7.2; 12.0.1.0 through 12.0.12.27
CVE-2024-22317
9.1
1%
Jan 18
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.24 and 12.0.1.0 through 12.0.11.0 could allow a remote attacker to obtain sensitive information or cause a denial of service due…
Affected: 11.0.0.1 through 11.0.0.24; 12.0.1.0 through 12.0.11.0
CVE-2026-75624
8.8
1%
Sep 10
IBM App Connect Enterprise is vulnerable to privilege escalation and Denial of Service
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.27
CVE-2025-36361
8.8
0%
Oct 24
IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined…
Affected: 12.0.1.0 through 12.0.12.17; 13.0.1.0 through 13.0.4.2
CVE-2026-17133
7.8
0%
Sep 14
IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.0; 12.0.1.0 through 12.0.12.27
CVE-2026-17156
7.8
0%
Sep 14
IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.0; 12.0.1.0 through 12.0.12.27
CVE-2026-17416
7.8
0%
Sep 14
IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.0; 12.0.1.0 through 12.0.12.27
CVE-2026-81832
7.7
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-78543
7.5
1%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-12947
7.5
0%
Jul 30
IBM App Connect Enterprise is vulnerable to Confidentiality disclosure on Discovery Connector nodes
Affected: 13.0.1.0 through 13.0.7.2; 12.0.1.0 through 12.0.12.27
CVE-2026-14519
7.5
1%
Jul 30
IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
Affected: 13.0.1.0 through 13.0.7.2; 12.0.1.0 through 12.0.12.27
CVE-2026-17443
6.5
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-17444
6.5
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2025-0799
6.5
0%
Feb 6
IBM App Connect enterprise 12.0.1.0 through 12.0.12.10 and 13.0.1.0 through 13.0.2.1 could allow an authenticated user to write to an arbitrary file on the system during bar…
Affected: 12.0.1.0 through 12.0.12.10; 13.0.1.0 through 13.0.2.1
CVE-2024-31895
6.5
0%
May 22
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token
Affected: 12.0.1.0 before 12.0.12.2
CVE-2024-31904
6.5
1%
May 22
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 integration nodes could allow an authenticated user to cause a denial of service due to an…
Affected: 11.0.0.1 before 11.0.0.26; 12.0.1.0 before 12.0.12.1
CVE-2022-42444
6.5
1%
Feb 12
IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow
Affected: 11.0.0.8 through 11.0.0.19; 12.0.1.0 through 12.0.5.0
CVE-2026-16180
5.7
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-16689
5.5
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-17440
5.5
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-17442
5.5
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-19649
5.5
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-3602
5.5
0%
Jun 30
IBM App Connect Enterprise and IBM Integration Bus for z/OS toolkit is vulnerable to an sql injection
Affected: 13.0.1.0 through 13.0.7.2; 12.0.1.0 through 12.0.12.26
CVE-2026-5515
5.5
0%
May 27
IBM App Connect Enterprise is vulnerable to a confidential disclosure
Affected: 13.0.1.0 through 13.0.7.0
CVE-2023-45176
5.5
0%
Oct 14
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through 10.1.0.1 are vulnerable to a denial of service for…
Affected: 11.0.0.1 through 11.0.0.23; 12.0.1.0 through 12.0.10.0
CVE-2024-28761
5.4
0%
May 14
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection
Affected: 11.0.0.1 before 11.0.0.26; 12.0.1.0 before 12.0.12.1
CVE-2024-49338
4.9
0%
Jan 18
IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged user to obtain JMS credentials
Affected: 12.0.1.0 before 12.0.12.8; 13.0.1.0
CVE-2024-22356
4.9
1%
Mar 26
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1 through 10.1.0.2store potentially sensitive information in…
Affected: 11.0.0.1 before 11.0.0.24; 12.0.1.0 before 12.0.10.0
CVE-2022-42439
4.9
1%
Feb 6
IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party…
Affected: 11.0.0.17 through 11.0.0.19; 12.0.4.0; 12.0.5.0
CVE-2023-40682
4.4
0%
Oct 13
IBM App Connect Enterprise 12.0.1.0 through 12.0.8.0 contains an unspecified vulnerability that could allow a local privileged user to obtain sensitive information from API logs
Affected: 12.0.1.0 before 12.0.9.0
CVE-2024-31894
4.3
0%
May 22
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token
Affected: 12.0.1.0 before 12.0.12.2
CVE-2024-31893
4.3
0%
May 22
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive calendar information using an expired access token
Affected: 12.0.1.0 before 12.0.12.2
CVE-2024-28760
4.3
0%
May 14
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 dashboard is vulnerable to a denial of service due to improper restrictions of resource…
Affected: 11.0.0.1 before 11.0.0.26; 12.0.1.0 before 12.0.12.1
Showing 35