Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:app_connect_enterprise_certified_container:4.2:*:*:*:*:*:*:*

part: a version: 4.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductApp Connect Enterprise Certified Container (03f2517d-fe9e-56f7-9031-0b6a930171e0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-43922 vulnerable 2026-06-03 14:48:16.664641 IBM App Connect Enterprise Certified Container information disclosure
MEDIUM (5.3)
IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583.
Published: 2023-02-01T17:32:29.171Z
Updated: 2025-03-26T18:42:41.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43874 vulnerable 2026-06-03 14:48:16.599161 IBM App Connect Enterprise Certified Container
MEDIUM (6.1)
IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239963.
Published: 2023-03-15T17:20:24.972Z
Updated: 2025-02-26T21:25:52.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42439 vulnerable 2026-06-03 14:48:12.627650 IBM App Connect Enterprise information disclosure
MEDIUM (6.8)
IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party system’s credentials to be exposed to a privileged attacker. IBM X-Force ID: 238211.
Published: 2023-02-06T20:25:26.204Z
Updated: 2025-03-25T17:35:13.105Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31770 vulnerable 2026-06-03 14:47:20.458565 Details available
MEDIUM (4.9)
IBM App Connect Enterprise Certified Container 4.2 could allow a user from the administration console to cause a denial of service by creating a specially crafted request. IBM X-Force ID: 228221.
Published: 2022-07-05T16:10:10.491Z
Updated: 2024-09-17T04:19:19.029Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.