App Connect Enterprise Certified Container
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | App Connect Enterprise Certified Container (03f2517d-fe9e-56f7-9031-0b6a930171e0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-51465 |
vulnerable | 2026-06-08 06:52:12.045640 |
IBM App Connect Enterprise Certified Container command execution
HIGH (8.8)
IBM App Connect Enterprise Certified Container 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, and 12.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
Published: 2024-12-04T14:08:58.092Z
Updated: 2024-12-04T14:29:54.978Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43922 |
vulnerable | 2026-06-08 05:49:35.015580 |
IBM App Connect Enterprise Certified Container information disclosure
MEDIUM (5.3)
IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583.
Published: 2023-02-01T17:32:29.171Z
Updated: 2025-03-26T18:42:41.836Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43916 |
vulnerable | 2026-06-08 05:49:35.000875 |
IBM App Connect Enterprise Certified Container improper communications restriction
MEDIUM (6.8)
IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, and 12.7 Pods do not restrict network egress for Pods that are used for internal infrastructure.
Published: 2025-01-30T12:04:47.259Z
Updated: 2025-02-18T19:00:47.236Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43874 |
vulnerable | 2026-06-08 05:49:34.925541 |
IBM App Connect Enterprise Certified Container
MEDIUM (6.1)
IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239963.
Published: 2023-03-15T17:20:24.972Z
Updated: 2025-02-26T21:25:52.338Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31770 |
vulnerable | 2026-06-08 05:44:42.198669 |
Details available
MEDIUM (4.9)
IBM App Connect Enterprise Certified Container 4.2 could allow a user from the administration console to cause a denial of service by creating a specially crafted request. IBM X-Force ID: 228221.
Published: 2022-07-05T16:10:10.491Z
Updated: 2024-09-17T04:19:19.029Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22491 |
vulnerable | 2026-06-08 05:40:53.859561 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22404 |
vulnerable | 2026-06-08 05:40:53.717674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29906 |
vulnerable | 2026-06-08 05:31:27.208281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29759 |
vulnerable | 2026-06-08 05:31:26.965388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4785 |
vulnerable | 2026-06-08 05:26:40.912680 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.