Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:app_connect_enterprise:12.0.1.0:*:*:*:*:*:*:*

part: a version: 12.0.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductApp Connect Enterprise (0e2360c5-8499-50ed-8ce7-0d4a7193f1ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-14522 vulnerable 2026-09-16 04:33:12.354597 IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
HIGH (8.8)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters.
Published: 2026-07-30T14:06:56.265Z
Updated: 2026-07-31T03:56:01.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14519 vulnerable 2026-09-16 04:33:12.019781 IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
HIGH (7.5)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to read arbitrary files due to a path traversal vulnerability.
Published: 2026-07-30T14:05:31.735Z
Updated: 2026-07-30T17:26:57.088Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15435 vulnerable 2026-09-16 04:33:06.631820 IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability
CRITICAL (9.8)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.
Published: 2026-07-30T14:08:36.535Z
Updated: 2026-07-31T16:10:24.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17133 vulnerable 2026-09-16 04:33:03.957870 IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
HIGH (7.8)
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Published: 2026-09-14T19:41:23.491Z
Updated: 2026-09-15T16:32:44.012Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17156 vulnerable 2026-09-16 04:33:03.077189 IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
HIGH (7.8)
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization.
Published: 2026-09-14T19:40:51.059Z
Updated: 2026-09-15T03:56:18.627Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17416 vulnerable 2026-09-16 04:33:03.003216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17444 vulnerable 2026-09-16 04:33:02.841817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75624 vulnerable 2026-09-16 04:32:53.456732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12947 vulnerable 2026-09-16 04:32:50.990339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3602 vulnerable 2026-07-29 00:46:20.841059 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36361 vulnerable 2026-06-08 07:21:01.629983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49338 vulnerable 2026-06-08 06:50:13.506786 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31904 vulnerable 2026-06-08 06:35:32.373079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31895 vulnerable 2026-06-08 06:35:32.282911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31894 vulnerable 2026-06-08 06:35:32.282484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31893 vulnerable 2026-06-08 06:35:32.280055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.