Known vulnerabilities in IBM App Connect Enterprise - page 2

Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 397
Public exploits: 34
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM App Connect Enterprise IBM App Connect Enterprise is affected by 397 known vulnerabilities: 4 critical, 46 high, 256 medium, 91 low Critical High Medium Low

Vulnerabilities (397)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145192 - Inefficient Algorithmic Complexity
CVE-2026-55968
CWE-407 Medium
No
No
13.0.8.2 25.08.2026 SB2026082559
SB2026082589
SB2026090813
and 1 more
#VU143918 - Incorrect Control Flow Scoping
CVE-2026-3449
CWE-705 Low
No
No
12.0.12.27, 13.0.8.0 18.08.2026 SB2026081807
SB2026081810
SB2026081811
and 3 more
#VU140825 - Inefficient Regular Expression Complexity
CVE-2026-69207
CWE-1333 Medium
No
No
13.0.8.2 03.08.2026 SB2026080392
SB2026090813
SB2026100615
#VU140824 - Inefficient Algorithmic Complexity
CVE-2026-71848
CWE-407 Medium
No
No
13.0.8.2 03.08.2026 SB2026080392
SB2026090813
SB2026091017
#VU140823 - Exposure of sensitive information to an unauthorized actor
CVE-2026-71849
CWE-200 Low
No
No
13.0.8.2 03.08.2026 SB2026080392
SB2026090813
SB2026091017
#VU140822 - Exposure of Data Element to Wrong Session
CVE-2026-71850
CWE-488 Low
No
No
13.0.8.2 03.08.2026 SB2026080392
SB2026090813
SB2026091017
#VU140666 - Inefficient Algorithmic Complexity
CVE-2026-73643
CWE-407 Medium
No
No
13.0.8.2 01.08.2026 SB2026080108
SB2026090813
#VU138958 - Use of Less Trusted Source
CVE-2026-54289
CWE-348 Medium
No
No
13.0.8.0 21.07.2026 SB20260721144
SB2026072415
SB20260917199
#VU138950 - Overly Permissive Cross-domain Whitelist
CVE-2026-54290
CWE-942 High
No
No
13.0.8.0 21.07.2026 SB20260721126
SB2026072415
SB20260917199
#VU138926 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-12143
CWE-93 High
No
No
12.0.12.28, 13.0.8.0 21.07.2026 SB20260721116
SB2026072414
SB2026072616
and 20 more
#VU138923 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-54286
CWE-22 High
No
No
13.0.8.0 21.07.2026 SB2026072198
SB2026072415
SB20260917199
#VU138921 - Improper Encoding or Escaping of Output
CVE-2026-54287
CWE-116 Medium
No
No
13.0.8.0 21.07.2026 SB2026072197
SB2026072415
SB20260917199
#VU138920 - Insufficient Verification of Data Authenticity
CVE-2026-54288
CWE-345 Medium
No
No
13.0.8.0 21.07.2026 SB2026072196
SB2026072415
SB20260917199
#VU136866 - Resource exhaustion
CVE-2026-59868
CWE-400 Medium
No
No
13.0.8.2 03.07.2026 SB2026070346
SB2026090813
#VU136865 - Resource exhaustion
CVE-2026-59870
CWE-400 Medium
No
No
13.0.8.2 03.07.2026 SB2026070345
SB2026090813
#VU134533 - Resource exhaustion
CVE-2026-5079
CWE-400 Medium
No
No
12.0.12.28, 13.0.8.0 15.06.2026 SB2026061544
SB2026072414
#VU134532 - Incomplete cleanup
CVE-2026-5038
CWE-459 Medium
No
No
12.0.12.28, 13.0.8.0 15.06.2026 SB2026061544
SB2026072414
#VU131746 - NULL Pointer Dereference
CVE-2026-8723
CWE-476 Medium
No
No
12.0.12.27, 13.0.8.0 18.05.2026 SB2026051892
SB2026061048
SB2026062221
and 7 more
#VU131249 - Use of Uninitialized Resource
CVE-2026-45736
CWE-908 Low
No
No
12.0.12.27, 13.0.8.0 12.05.2026 SB20260512113
SB2026061995
SB2026062221
and 13 more
#VU131107 - Resource exhaustion
CVE-2026-45149
CWE-400 Medium
No
No
12.0.12.27, 13.0.8.0 12.05.2026 SB2026051222
SB2026061993
SB2026061994
and 3 more


Showing elements 21 - 40 out of 397