Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:app_connect_enterprise:13.0.1.0:*:*:*:*:*:*:*

part: a version: 13.0.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductApp Connect Enterprise (0e2360c5-8499-50ed-8ce7-0d4a7193f1ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-14522 vulnerable 2026-09-16 04:33:12.352276 IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
HIGH (8.8)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters.
Published: 2026-07-30T14:06:56.265Z
Updated: 2026-07-31T03:56:01.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14519 vulnerable 2026-09-16 04:33:12.017467 IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
HIGH (7.5)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to read arbitrary files due to a path traversal vulnerability.
Published: 2026-07-30T14:05:31.735Z
Updated: 2026-07-30T17:26:57.088Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15435 vulnerable 2026-09-16 04:33:06.629093 IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability
CRITICAL (9.8)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.
Published: 2026-07-30T14:08:36.535Z
Updated: 2026-07-31T16:10:24.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17133 vulnerable 2026-09-16 04:33:03.956739 IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
HIGH (7.8)
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Published: 2026-09-14T19:41:23.491Z
Updated: 2026-09-15T16:32:44.012Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17156 vulnerable 2026-09-16 04:33:03.076050 IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
HIGH (7.8)
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization.
Published: 2026-09-14T19:40:51.059Z
Updated: 2026-09-15T03:56:18.627Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17416 vulnerable 2026-09-16 04:33:02.996172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17444 vulnerable 2026-09-16 04:33:02.839980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75624 vulnerable 2026-09-16 04:32:53.453958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12947 vulnerable 2026-09-16 04:32:50.988436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3602 vulnerable 2026-07-29 00:46:20.837791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5515 vulnerable 2026-06-08 08:07:03.783164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36361 vulnerable 2026-06-08 07:21:01.631102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49338 vulnerable 2026-06-08 06:50:13.508236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.