Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:app_connect_enterprise:12.0.1.0:*:*:*:*:*:*:*

part: a version: 12.0.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductApp Connect Enterprise (0e2360c5-8499-50ed-8ce7-0d4a7193f1ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3602 vulnerable 2026-07-29 00:46:20.841059 IBM App Connect Enterprise and IBM Integration Bus for z/OS toolkit is vulnerable to an sql injection
MEDIUM (4.7)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creating files they may not be aware of.
Published: 2026-06-30T19:19:47.135Z
Updated: 2026-07-20T14:26:09.238Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36361 vulnerable 2026-06-08 07:21:01.629983 IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA
MEDIUM (6.3)
IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization.
Published: 2025-10-24T09:35:20.590Z
Updated: 2025-10-25T02:03:18.631Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49338 vulnerable 2026-06-08 06:50:13.506786 IBM App Connect Enterprise information disclosure
MEDIUM (4.4)
IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged user to obtain JMS credentials.
Published: 2025-01-18T15:00:16.148Z
Updated: 2025-01-21T20:59:39.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31904 vulnerable 2026-06-08 06:35:32.373079 IBM App Connect Enterprise denial of service
MEDIUM (6.5)
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 integration nodes could allow an authenticated user to cause a denial of service due to an uncaught exception. IBM X-Force ID: 289647.
Published: 2024-05-22T18:34:39.881Z
Updated: 2024-08-02T01:59:50.282Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31895 vulnerable 2026-06-08 06:35:32.282911 IBM App Connect Enterprise information disclosure
MEDIUM (4.3)
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token. IBM X-Force ID: 288176.
Published: 2024-05-22T19:16:30.321Z
Updated: 2024-08-02T01:59:50.213Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31894 vulnerable 2026-06-08 06:35:32.282484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31893 vulnerable 2026-06-08 06:35:32.280055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.