Known vulnerabilities in Application Modernization Accelerator

Vendor: IBM Corporation
Software: Application Modernization Accelerator
Software CPE: cpe:2.3:a:ibm_corporation:application_modernization_accelerator:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 40
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Application Modernization Accelerator Application Modernization Accelerator is affected by 40 known vulnerabilities: 6 high, 18 medium, 16 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138926 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-12143		 CWE-93 High
No
No
 5.0.0 21.07.2026 SB20260721116
SB2026072414
SB2026072616
and 14 more
#VU135090 - Improper Privilege Management
CVE-2026-3621		 CWE-269 Medium
No
No
 5.0.0 24.06.2026 SB2026062429
SB2026062430
SB20260626104
and 13 more
#VU134925 - Improper input validation
CVE-2026-40181		 CWE-20 Low
No
No
 5.0.0 19.06.2026 SB2026061978
SB2026070733
SB2026071327
and 2 more
#VU132377 - Always-Incorrect Control Flow Implementation
CVE-2026-41988		 CWE-670 Low
No
No
 5.0.0 27.05.2026 SB2026052767
SB2026052768
SB20260528259
and 9 more
#VU132376 - Out-of-bounds write
CVE-2026-41907		 CWE-787 High
No
No
 5.0.0 27.05.2026 SB2026052766
SB2026052768
SB2026060118
and 8 more
#VU132031 - Security Features
CVE-2026-5516		 CWE-254 Low
No
No
 5.0.0 21.05.2026 SB2026052115
SB20260626104
SB2026071327
and 13 more
#VU131746 - NULL Pointer Dereference
CVE-2026-8723		 CWE-476 Medium
No
No
 5.0.0 18.05.2026 SB2026051892
SB2026061048
SB2026062221
and 6 more
#VU131249 - Use of Uninitialized Resource
CVE-2026-45736		 CWE-908 Low
No
No
 5.0.0 12.05.2026 SB20260512113
SB2026061995
SB2026062221
and 11 more
#VU126758 - Improper input validation
CVE-2026-22016		 CWE-20 Medium
No
No
 5.0.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 79 more
#VU126761 - Improper input validation
CVE-2026-22021		 CWE-20 Medium
No
No
 5.0.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 81 more
#VU126762 - Improper input validation
CVE-2026-22013		 CWE-20 Medium
No
No
 5.0.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 78 more
#VU126764 - Improper input validation
CVE-2026-22018		 CWE-20 Low
No
No
 5.0.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 78 more
#VU126765 - Improper input validation
CVE-2026-22007		 CWE-20 Low
No
No
 5.0.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 78 more
#VU126766 - Improper input validation
CVE-2026-34268		 CWE-20 Low
No
No
 5.0.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 78 more
#VU126561 - Permissive List of Allowed Inputs
CVE-2026-41240		 CWE-183 Low
No
No
 4.6.2 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 9 more
#VU126560 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41239		 CWE-79 Medium
No
No
 4.6.2 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 5 more
#VU126559 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-41238		 CWE-1321 Medium
No
No
 4.6.2 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 4 more
#VU115568 - Allocation of Resources Without Limits or Throttling
CVE-2025-36047		 CWE-770 Medium
No
No
 4.4.0 16.09.2025 SB20250916312
SB20250916316
SB20250916321
and 29 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 4.4.0 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more
#VU113085 - Interpretation Conflict
CVE-2024-56339		 CWE-436 Medium
No
No
 4.4.0 21.07.2025 SB2025072116
SB2025072130
SB2025072305
and 45 more


Showing elements 1 - 20 out of 40