Known vulnerabilities in IBM App Connect Enterprise

Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 361
Public exploits: 34
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM App Connect Enterprise IBM App Connect Enterprise is affected by 361 known vulnerabilities: 4 critical, 44 high, 229 medium, 84 low Critical High Medium Low

Vulnerabilities (361)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145304 - Improper Access Control
CVE-2026-43870
CWE-284 Medium
No
No
13.0.7.2 25.08.2026 SB2026042851
SB2026082613
#VU143918 - Incorrect Control Flow Scoping
CVE-2026-3449
CWE-705 Low
No
No
12.0.12.27, 13.0.8.0 18.08.2026 SB2026081807
SB2026081810
SB2026081811
and 3 more
#VU138958 - Use of Less Trusted Source
CVE-2026-54289
CWE-348 Medium
No
No
13.0.8.0 21.07.2026 SB20260721144
SB2026072415
#VU138950 - Overly Permissive Cross-domain Whitelist
CVE-2026-54290
CWE-942 High
No
No
13.0.8.0 21.07.2026 SB20260721126
SB2026072415
#VU138923 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-54286
CWE-22 High
No
No
13.0.8.0 21.07.2026 SB2026072198
SB2026072415
#VU138921 - Improper Encoding or Escaping of Output
CVE-2026-54287
CWE-116 Medium
No
No
13.0.8.0 21.07.2026 SB2026072197
SB2026072415
#VU138920 - Insufficient Verification of Data Authenticity
CVE-2026-54288
CWE-345 Medium
No
No
13.0.8.0 21.07.2026 SB2026072196
SB2026072415
#VU134533 - Resource exhaustion
CVE-2026-5079
CWE-400 Medium
No
No
12.0.12.28, 13.0.8.0 15.06.2026 SB2026061544
SB2026072414
#VU134532 - Incomplete cleanup
CVE-2026-5038
CWE-459 Medium
No
No
12.0.12.28, 13.0.8.0 15.06.2026 SB2026061544
SB2026072414
#VU132377 - Always-Incorrect Control Flow Implementation
CVE-2026-41988
CWE-670 Low
No
No
12.0.12.27, 13.0.8.0 27.05.2026 SB2026052767
SB2026052768
SB20260528259
and 9 more
#VU132376 - Out-of-bounds write
CVE-2026-41907
CWE-787 High
No
No
12.0.12.27, 13.0.8.0 27.05.2026 SB2026052766
SB2026052768
SB2026060118
and 7 more
#VU132262 - Resource exhaustion
CVE-2026-3505
CWE-400 Medium
No
No
13.0.8.0 25.05.2026 SB2026052529
SB2026052531
SB2026052542
and 3 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-0636
CWE-90 Medium
No
No
13.0.8.0 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 13 more
#VU132260 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-5588
CWE-327 Medium
No
No
13.0.8.0 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 15 more
#VU132259 - Covert Timing Channel
CVE-2026-5598
CWE-385 Medium
No
No
13.0.8.0 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 16 more
#VU131746 - NULL Pointer Dereference
CVE-2026-8723
CWE-476 Medium
No
No
12.0.12.27, 13.0.8.0 18.05.2026 SB2026051892
SB2026061048
SB2026062221
and 5 more
#VU131249 - Use of Uninitialized Resource
CVE-2026-45736
CWE-908 Low
No
No
12.0.12.27, 13.0.8.0 12.05.2026 SB20260512113
SB2026061995
SB2026062221
and 9 more
#VU131107 - Resource exhaustion
CVE-2026-45149
CWE-400 Medium
No
No
12.0.12.27, 13.0.8.0 12.05.2026 SB2026051222
SB2026061993
SB2026061994
and 2 more
#VU128303 - Uncontrolled Recursion
CVE-2026-41636
CWE-674 Medium
No
No
13.0.7.2 28.04.2026 SB2026042851
SB2026051810
SB2026082613
#VU122076 - Stack-based buffer overflow
CVE-2025-15467
CWE-121 High
Available
No
12.0.12.27, 13.0.8.0 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 66 more


Showing elements 1 - 20 out of 361