IBM App Connect Enterprise 12.0.12.27
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:app_connect_enterprise:12.0.12.27:*:*:*:*:*:*:*
part: a version: 12.0.12.27 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | App Connect Enterprise (0e2360c5-8499-50ed-8ce7-0d4a7193f1ed) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE Match 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14522 |
vulnerable | 2026-09-16 04:33:12.355747 |
IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
HIGH (8.8)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters.
Published: 2026-07-30T14:06:56.265Z
Updated: 2026-07-31T03:56:01.243Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14519 |
vulnerable | 2026-09-16 04:33:12.020847 |
IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
HIGH (7.5)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to read arbitrary files due to a path traversal vulnerability.
Published: 2026-07-30T14:05:31.735Z
Updated: 2026-07-30T17:26:57.088Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15435 |
vulnerable | 2026-09-16 04:33:06.632997 |
IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability
CRITICAL (9.8)
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.
Published: 2026-07-30T14:08:36.535Z
Updated: 2026-07-31T16:10:24.469Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-17133 |
vulnerable | 2026-09-16 04:33:03.958438 |
IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
HIGH (7.8)
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Published: 2026-09-14T19:41:23.491Z
Updated: 2026-09-15T16:32:44.012Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-17156 |
vulnerable | 2026-09-16 04:33:03.077758 |
IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
HIGH (7.8)
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization.
Published: 2026-09-14T19:40:51.059Z
Updated: 2026-09-15T03:56:18.627Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-17416 |
vulnerable | 2026-09-16 04:33:03.004053 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-75624 |
vulnerable | 2026-09-16 04:32:53.457554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12947 |
vulnerable | 2026-09-16 04:32:50.991245 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.