Ibm

App Connect Enterprise

21 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-12947

  • EPSS 0.4%
  • Veröffentlicht 30.07.2026 14:17:30
  • Zuletzt bearbeitet 05.08.2026 14:50:01

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive information in log files that could be read by a local user.

9.8

CVE-2026-15435

Medienbericht
  • EPSS 0.73%
  • Veröffentlicht 30.07.2026 14:08:36
  • Zuletzt bearbeitet 05.08.2026 14:32:18

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to...

9.8

CVE-2026-14522

Medienbericht
  • EPSS 1.02%
  • Veröffentlicht 30.07.2026 14:06:56
  • Zuletzt bearbeitet 05.08.2026 14:39:44

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters.

7.5

CVE-2026-14519

Medienbericht
  • EPSS 0.62%
  • Veröffentlicht 30.07.2026 14:05:31
  • Zuletzt bearbeitet 05.08.2026 14:41:35

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to read arbitrary files due to a path traversal vulnerability.

5.5

CVE-2026-3602

  • EPSS 0.19%
  • Veröffentlicht 30.06.2026 19:19:47
  • Zuletzt bearbeitet 20.07.2026 15:16:37

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creati...

5.5

CVE-2026-5515

  • EPSS 0.1%
  • Veröffentlicht 27.05.2026 12:58:13
  • Zuletzt bearbeitet 02.06.2026 17:16:37

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be read by a local user.

8.8

CVE-2025-36361

  • EPSS 0.21%
  • Veröffentlicht 24.10.2025 09:35:20
  • Zuletzt bearbeitet 28.10.2025 14:27:33

IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization.

6.5

CVE-2025-0799

  • EPSS 0.49%
  • Veröffentlicht 06.02.2025 01:15:09
  • Zuletzt bearbeitet 12.08.2025 18:46:13

IBM App Connect enterprise 12.0.1.0 through 12.0.12.10 and 13.0.1.0 through 13.0.2.1 could allow an authenticated user to write to an arbitrary file on the system during bar configuration deployment due to improper pathname limitations on restricted ...

4.9

CVE-2024-49338

  • EPSS 0.38%
  • Veröffentlicht 18.01.2025 15:15:07
  • Zuletzt bearbeitet 13.08.2025 00:24:57

IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged user to obtain JMS credentials.

4.3

CVE-2024-31894

  • EPSS 0.26%
  • Veröffentlicht 22.05.2024 20:15:09
  • Zuletzt bearbeitet 08.01.2025 19:58:17

IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token. IBM X-Force ID: 288175.