IBM App Connect Enterprise 13.0.7.2
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:app_connect_enterprise:13.0.7.2:*:*:*:*:*:*:*
part: a version: 13.0.7.2 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | App Connect Enterprise (0e2360c5-8499-50ed-8ce7-0d4a7193f1ed) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14522 |
vulnerable | 2026-09-16 04:33:12.353479 |
IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
HIGH (8.8)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters.
Published: 2026-07-30T14:06:56.265Z
Updated: 2026-07-31T03:56:01.243Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14519 |
vulnerable | 2026-09-16 04:33:12.018683 |
IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
HIGH (7.5)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to read arbitrary files due to a path traversal vulnerability.
Published: 2026-07-30T14:05:31.735Z
Updated: 2026-07-30T17:26:57.088Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15435 |
vulnerable | 2026-09-16 04:33:06.630292 |
IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability
CRITICAL (9.8)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.
Published: 2026-07-30T14:08:36.535Z
Updated: 2026-07-31T16:10:24.469Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12947 |
vulnerable | 2026-09-16 04:32:50.989394 |
IBM App Connect Enterprise is vulnerable to Confidentiality disclosure on Discovery Connector nodes
HIGH (7.5)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive information in log files that could be read by a local user.
Published: 2026-07-30T14:17:30.878Z
Updated: 2026-07-30T16:18:40.220Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3602 |
vulnerable | 2026-07-29 00:46:20.840070 |
IBM App Connect Enterprise and IBM Integration Bus for z/OS toolkit is vulnerable to an sql injection
MEDIUM (4.7)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creating files they may not be aware of.
Published: 2026-06-30T19:19:47.135Z
Updated: 2026-07-20T14:26:09.238Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.