Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:app_connect_enterprise_certified_container:6.1:*:*:*:*:*:*:*

part: a version: 6.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductApp Connect Enterprise Certified Container (03f2517d-fe9e-56f7-9031-0b6a930171e0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-43922 vulnerable 2026-06-08 05:49:35.016059 IBM App Connect Enterprise Certified Container information disclosure
MEDIUM (5.3)
IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583.
Published: 2023-02-01T17:32:29.171Z
Updated: 2025-03-26T18:42:41.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43874 vulnerable 2026-06-08 05:49:34.927532 IBM App Connect Enterprise Certified Container
MEDIUM (6.1)
IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239963.
Published: 2023-03-15T17:20:24.972Z
Updated: 2025-02-26T21:25:52.338Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.