Known vulnerabilities in IBM App Connect Enterprise - page 17

Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 361
Public exploits: 34
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM App Connect Enterprise IBM App Connect Enterprise is affected by 361 known vulnerabilities: 4 critical, 44 high, 229 medium, 84 low Critical High Medium Low

Vulnerabilities (361)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2022-43548
CWE-350 Medium
No
No
- 15.11.2022 SB2022111599
SB20221115101
SB20221115102
and 47 more
#VU68843 - Improper input validation
CVE-2022-39353
CWE-20 High
No
No
12.0.7.0 31.10.2022 SB2022103127
SB2022121803
SB2022122303
and 4 more
#VU68832 - Resource exhaustion
CVE-2022-42004
CWE-400 Medium
No
No
- 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-35256
CWE-444 Medium
No
No
- 03.10.2022 SB2022100347
SB2022100401
SB2022100402
and 50 more
#VU66698 - Exposure of sensitive information to an unauthorized actor
CVE-2022-29244
CWE-200 Medium
No
No
11.0.0.18, 12.0.5.0 22.08.2022 SB2022082252
SB2022082253
SB2022091110
and 15 more
#VU66400 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-33987
CWE-601 Medium
No
No
11.0.0.18, 12.0.5.0 11.08.2022 SB2022081124
SB2022081525
SB2022090835
and 22 more
#VU65276 - Uncontrolled Search Path Element
CVE-2022-32223
CWE-427 Low
Available
No
- 13.07.2022 SB2022071338
SB2022080910
SB2022081105
and 9 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32213
CWE-444 Medium
No
No
- 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 55 more
#VU65273 - Improper Check or Handling of Exceptional Conditions
CVE-2022-32212
CWE-703 Medium
No
No
- 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 48 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097
CWE-311 Low
No
No
- 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU62400 - Improper input validation
CVE-2022-21496
CWE-20 Medium
No
No
11.0.0.19, 12.0.6.0 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 118 more
#VU62401 - Improper input validation
CVE-2022-21434
CWE-20 Medium
No
No
11.0.0.19, 12.0.6.0 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 111 more
#VU62402 - Improper input validation
CVE-2022-21443
CWE-20 Low
No
No
11.0.0.19, 12.0.6.0 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 109 more
#VU59727 - Improper input validation
CVE-2022-21299
CWE-20 Medium
No
No
11.0.0.19, 12.0.6.0 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 105 more
#VU57493 - Improper input validation
CVE-2021-35561
CWE-20 Medium
No
No
11.0.0.19, 12.0.6.0 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 94 more
#VU52448 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-2161
CWE-94 Medium
No
No
- 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 45 more
#VU51945 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23358
CWE-94 High
No
No
11.0.0.13 06.04.2021 SB2021040623
SB2021040624
SB2021050609
and 20 more
#VU51733 - NULL Pointer Dereference
CVE-2021-3449
CWE-476 Medium
Available
No
11.0.0.13 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 56 more
#VU51732 - Security Features
CVE-2021-3450
CWE-254 Medium
No
No
11.0.0.13 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU49916 - Stack-based buffer overflow
CVE-2020-27221
CWE-121 High
No
No
- 21.01.2021 SB2021012130
SB2021030504
SB2021030505
and 16 more


Showing elements 321 - 340 out of 361