AC
Product
App Connect Enterprise
35
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 4High 9Medium 22Low 0
Watch
Add App Connect Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-17443 | 6.5 | Sep 4 | IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28 |
| CVE-2026-17444 | 6.5 | Sep 4 | IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28 |
| CVE-2025-0799 | 6.5 | Feb 6 | IBM App Connect enterprise 12.0.1.0 through 12.0.12.10 and 13.0.1.0 through 13.0.2.1 could allow an authenticated user to write to an arbitrary file on the system during bar… Affected: 12.0.1.0 through 12.0.12.10; 13.0.1.0 through 13.0.2.1 |
| CVE-2024-31895 | 6.5 | May 22 | IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token Affected: 12.0.1.0 before 12.0.12.2 |
| CVE-2024-31904 | 6.5 | May 22 | IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 integration nodes could allow an authenticated user to cause a denial of service due to an… Affected: 11.0.0.1 before 11.0.0.26; 12.0.1.0 before 12.0.12.1 |
| CVE-2022-42444 | 6.5 | Feb 12 | IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow Affected: 11.0.0.8 through 11.0.0.19; 12.0.1.0 through 12.0.5.0 |
| CVE-2026-16180 | 5.7 | Sep 4 | IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28 |
| CVE-2026-16689 | 5.5 | Sep 4 | IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28 |
| CVE-2026-17440 | 5.5 | Sep 4 | IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28 |
| CVE-2026-17442 | 5.5 | Sep 4 | IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28 |
| CVE-2026-19649 | 5.5 | Sep 4 | IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28 |
| CVE-2026-3602 | 5.5 | Jun 30 | IBM App Connect Enterprise and IBM Integration Bus for z/OS toolkit is vulnerable to an sql injection Affected: 13.0.1.0 through 13.0.7.2; 12.0.1.0 through 12.0.12.26 |
| CVE-2026-5515 | 5.5 | May 27 | IBM App Connect Enterprise is vulnerable to a confidential disclosure Affected: 13.0.1.0 through 13.0.7.0 |
| CVE-2023-45176 | 5.5 | Oct 14 | IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through 10.1.0.1 are vulnerable to a denial of service for… Affected: 11.0.0.1 through 11.0.0.23; 12.0.1.0 through 12.0.10.0 |
| CVE-2024-28761 | 5.4 | May 14 | IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection Affected: 11.0.0.1 before 11.0.0.26; 12.0.1.0 before 12.0.12.1 |
| CVE-2024-49338 | 4.9 | Jan 18 | IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged user to obtain JMS credentials Affected: 12.0.1.0 before 12.0.12.8; 13.0.1.0 |
| CVE-2024-22356 | 4.9 | Mar 26 | IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1 through 10.1.0.2store potentially sensitive information in… Affected: 11.0.0.1 before 11.0.0.24; 12.0.1.0 before 12.0.10.0 |
| CVE-2022-42439 | 4.9 | Feb 6 | IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party… Affected: 11.0.0.17 through 11.0.0.19; 12.0.4.0; 12.0.5.0 |
| CVE-2023-40682 | 4.4 | Oct 13 | IBM App Connect Enterprise 12.0.1.0 through 12.0.8.0 contains an unspecified vulnerability that could allow a local privileged user to obtain sensitive information from API logs Affected: 12.0.1.0 before 12.0.9.0 |
| CVE-2024-31894 | 4.3 | May 22 | IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token Affected: 12.0.1.0 before 12.0.12.2 |
| CVE-2024-31893 | 4.3 | May 22 | IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive calendar information using an expired access token Affected: 12.0.1.0 before 12.0.12.2 |
| CVE-2024-28760 | 4.3 | May 14 | IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 dashboard is vulnerable to a denial of service due to improper restrictions of resource… Affected: 11.0.0.1 before 11.0.0.26; 12.0.1.0 before 12.0.12.1 |
Showing 22