5.9

CVE-2025-13490

IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that report metrics are vulnerable to loss of confidentiality

IBM App Connect Operator versions CD 11.3.0 through 11.6.0 and 12.1.0 through 12.20.0, LTS versions 12.0.0 through 12.0.20, and IBM App Connect Enterprise Certified Containers Operands versions CD 12.0.11.2‑r1 through 12.0.12.5‑r1 and 13.0.1.0‑r1 through 13.0.6.1‑r1, and LTS versions 12.0.12‑r1 through 12.0.12‑r20, contain a vulnerability in which the IBM App Connect Enterprise Certified Container transmits data in clear text, potentially allowing an attacker to intercept and obtain sensitive information through man‑in‑the‑middle techniques.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.11.2 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.11.3 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r1 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r10 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r11 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r12 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r13 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r14 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r15 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r16 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r17 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r18 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r19 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r2 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r20 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r3 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r4 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r5 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r6 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r7 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r8 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r9 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.0 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.0 Update r2 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.2 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.3 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.4 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.5 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.1.0 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.1.0 Update r2 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.1.1 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.2.0 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.2.1 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.2.2 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.2.2 Update r2 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.3.0 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.3.1 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.4.0 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.4.1 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.4.2 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.5.0 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.5.1 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.5.2 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.6.0 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.6.1 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Operator SwEdition continuous_delivery Version >= 11.3.0 <= 11.6.0
Ibm ≫ App Connect Operator SwEdition lts Version >= 12.0.0 <= 12.0.20
Ibm ≫ App Connect Operator SwEdition continuous_delivery Version >= 12.1.0 <= 12.20.1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.083
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
IBM 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-319 Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

https://www.ibm.com/support/pages/node/7262271
Vendor Advisory