Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:app_connect_enterprise:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductApp Connect Enterprise (0e2360c5-8499-50ed-8ce7-0d4a7193f1ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5515 vulnerable 2026-06-08 08:07:03.785166 IBM App Connect Enterprise is vulnerable to a confidential disclosure
MEDIUM (5.5)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be read by a local user.
Published: 2026-05-27T12:58:13.004Z
Updated: 2026-06-02T16:12:13.028Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36361 vulnerable 2026-06-08 07:21:01.633708 IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA
MEDIUM (6.3)
IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization.
Published: 2025-10-24T09:35:20.590Z
Updated: 2025-10-25T02:03:18.631Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0799 vulnerable 2026-06-08 07:02:25.560727 IBM App Connect Enterprise Arbitrary File Write
MEDIUM (6.5)
IBM App Connect enterprise 12.0.1.0 through 12.0.12.10 and 13.0.1.0 through 13.0.2.1 could allow an authenticated user to write to an arbitrary file on the system during bar configuration deployment due to improper pathname limitations on restricted directories.
Published: 2025-02-06T00:24:40.878Z
Updated: 2025-02-22T22:16:23.189Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49338 vulnerable 2026-06-08 06:50:13.508995 IBM App Connect Enterprise information disclosure
MEDIUM (4.4)
IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged user to obtain JMS credentials.
Published: 2025-01-18T15:00:16.148Z
Updated: 2025-01-21T20:59:39.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31904 vulnerable 2026-06-08 06:35:32.374333 IBM App Connect Enterprise denial of service
MEDIUM (6.5)
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 integration nodes could allow an authenticated user to cause a denial of service due to an uncaught exception. IBM X-Force ID: 289647.
Published: 2024-05-22T18:34:39.881Z
Updated: 2024-08-02T01:59:50.282Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31895 vulnerable 2026-06-08 06:35:32.283112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31894 vulnerable 2026-06-08 06:35:32.282558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31893 vulnerable 2026-06-08 06:35:32.282028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28761 vulnerable 2026-06-08 06:33:27.236264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28760 vulnerable 2026-06-08 06:33:27.233690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22356 vulnerable 2026-06-08 06:29:34.644083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22317 vulnerable 2026-06-08 06:29:34.517640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45176 vulnerable 2026-06-08 06:12:42.105096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40682 vulnerable 2026-06-08 06:11:04.218503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42444 vulnerable 2026-06-08 05:49:29.957948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42439 vulnerable 2026-06-08 05:49:29.943228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.