Known vulnerabilities in IBM App Connect Enterprise

Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 397
Public exploits: 34
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM App Connect Enterprise IBM App Connect Enterprise is affected by 397 known vulnerabilities: 4 critical, 46 high, 256 medium, 91 low Critical High Medium Low

Vulnerabilities (397)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145304 - Improper Access Control
CVE-2026-43870
CWE-284 Medium
No
No
13.0.7.2 25.08.2026 SB2026042851
SB2026082613
SB2026100104
#VU144746 - Resource exhaustion
CVE-2026-66144
CWE-400 Low
No
No
13.0.8.2 24.08.2026 SB20260824134
SB2026090812
SB2026091616
and 1 more
#VU144745 - Resource exhaustion
CVE-2026-66143
CWE-400 Medium
No
No
13.0.8.2 24.08.2026 SB20260824134
SB2026090812
SB2026091616
and 1 more
#VU144744 - Uncontrolled Recursion
CVE-2026-66142
CWE-674 Medium
No
No
13.0.8.2 24.08.2026 SB20260824134
SB2026090812
SB2026091616
and 1 more
#VU144400 - Uncontrolled Recursion
CVE-2026-16440
CWE-674 Low
No
No
12.0.12.30, 13.0.9.0 19.08.2026 SB20260819144
SB2026091031
SB2026091115
and 3 more
#VU137399 - Improper input validation
CVE-2026-6790
CWE-20 Medium
No
No
13.0.9.0 13.07.2026 SB2026071349
SB2026091018
SB20260917198
and 3 more
#VU137398 - Exposure of sensitive information to an unauthorized actor
CVE-2026-10051
CWE-200 Medium
No
No
13.0.9.0 13.07.2026 SB2026071348
SB2026092810
#VU137397 - Improper Handling of Alternate Encoding
CVE-2026-10050
CWE-173 High
No
No
13.0.9.0 13.07.2026 SB2026071348
SB2026081819
SB2026083180
and 2 more
#VU135768 - Allocation of Resources Without Limits or Throttling
CVE-2026-59873
CWE-770 Medium
No
No
12.0.12.28, 13.0.9.0 29.06.2026 SB2026062990
SB20260728122
SB2026072972
and 9 more
#VU135767 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-59874
CWE-835 Medium
No
No
12.0.12.28, 13.0.9.0 29.06.2026 SB2026062989
SB20260728122
SB2026072972
and 7 more
#VU135766 - Type conversion
CVE-2026-59871
CWE-704 Medium
No
No
12.0.12.28, 13.0.9.0 29.06.2026 SB2026062989
SB2026083177
SB2026083182
and 2 more
#VU135506 - Uncaught Exception
CVE-2026-59875
CWE-248 Medium
No
No
12.0.12.28, 13.0.9.0 26.06.2026 SB2026062678
SB2026092957
#VU132377 - Always-Incorrect Control Flow Implementation
CVE-2026-41988
CWE-670 Low
No
No
12.0.12.27, 13.0.8.0 27.05.2026 SB2026052767
SB2026052768
SB20260528259
and 11 more
#VU132376 - Out-of-bounds write
CVE-2026-41907
CWE-787 High
No
No
12.0.12.27, 13.0.8.0 27.05.2026 SB2026052766
SB2026052768
SB2026060118
and 12 more
#VU132262 - Resource exhaustion
CVE-2026-3505
CWE-400 Medium
No
No
13.0.8.0 25.05.2026 SB2026052529
SB2026052531
SB2026052542
and 4 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-0636
CWE-90 Medium
No
No
13.0.8.0 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 16 more
#VU132260 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-5588
CWE-327 Medium
No
No
13.0.8.0 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 18 more
#VU132259 - Covert Timing Channel
CVE-2026-5598
CWE-385 Medium
No
No
13.0.8.0 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 19 more
#VU128303 - Uncontrolled Recursion
CVE-2026-41636
CWE-674 Medium
No
No
13.0.7.2 28.04.2026 SB2026042851
SB2026051810
SB2026082613
#VU122076 - Stack-based buffer overflow
CVE-2025-15467
CWE-121 High
Available
No
12.0.12.27, 13.0.8.0 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 67 more


Showing elements 1 - 20 out of 397