Ibm

App Connect Enterprise

34 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2026-17133

  • EPSS 0.15%
  • Veröffentlicht 14.09.2026 19:41:23
  • Zuletzt bearbeitet 16.09.2026 19:22:22

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

7.8

CVE-2026-17156

  • EPSS 0.14%
  • Veröffentlicht 14.09.2026 19:40:51
  • Zuletzt bearbeitet 16.09.2026 19:22:22

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization.

7.8

CVE-2026-17416

  • EPSS 0.14%
  • Veröffentlicht 14.09.2026 19:40:11
  • Zuletzt bearbeitet 16.09.2026 19:22:22

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization.

8.8

CVE-2026-75624

  • EPSS 0.37%
  • Veröffentlicht 10.09.2026 21:45:42
  • Zuletzt bearbeitet 16.09.2026 19:37:53

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to incorrect authorization.

5.7

CVE-2026-16180

  • EPSS 0.22%
  • Veröffentlicht 04.09.2026 16:42:50
  • Zuletzt bearbeitet 09.09.2026 14:43:01

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service condition due to improper validati...

5.5

CVE-2026-16689

  • EPSS 0.12%
  • Veröffentlicht 04.09.2026 16:42:13
  • Zuletzt bearbeitet 08.09.2026 18:17:35

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of credentials.

5.5

CVE-2026-17440

  • EPSS 0.1%
  • Veröffentlicht 04.09.2026 16:37:09
  • Zuletzt bearbeitet 09.09.2026 14:12:06

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontrolled recursion.

5.5

CVE-2026-17442

  • EPSS 0.11%
  • Veröffentlicht 04.09.2026 16:36:02
  • Zuletzt bearbeitet 10.09.2026 16:17:08

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace lo...

6.5

CVE-2026-17443

  • EPSS 0.29%
  • Veröffentlicht 04.09.2026 16:33:05
  • Zuletzt bearbeitet 09.09.2026 16:10:14

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity...

6.5

CVE-2026-17444

  • EPSS 0.29%
  • Veröffentlicht 04.09.2026 16:32:47
  • Zuletzt bearbeitet 10.09.2026 21:17:21

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity...