Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:app_connect_enterprise:13.0.1.0:*:*:*:*:*:*:*

part: a version: 13.0.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductApp Connect Enterprise (0e2360c5-8499-50ed-8ce7-0d4a7193f1ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3602 vulnerable 2026-07-29 00:46:20.837791 IBM App Connect Enterprise and IBM Integration Bus for z/OS toolkit is vulnerable to an sql injection
MEDIUM (4.7)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creating files they may not be aware of.
Published: 2026-06-30T19:19:47.135Z
Updated: 2026-07-20T14:26:09.238Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5515 vulnerable 2026-06-08 08:07:03.783164 IBM App Connect Enterprise is vulnerable to a confidential disclosure
MEDIUM (5.5)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be read by a local user.
Published: 2026-05-27T12:58:13.004Z
Updated: 2026-06-02T16:12:13.028Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36361 vulnerable 2026-06-08 07:21:01.631102 IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA
MEDIUM (6.3)
IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization.
Published: 2025-10-24T09:35:20.590Z
Updated: 2025-10-25T02:03:18.631Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49338 vulnerable 2026-06-08 06:50:13.508236 IBM App Connect Enterprise information disclosure
MEDIUM (4.4)
IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged user to obtain JMS credentials.
Published: 2025-01-18T15:00:16.148Z
Updated: 2025-01-21T20:59:39.138Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.