Known vulnerabilities in IBM App Connect Enterprise - page 3

Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 397
Public exploits: 34
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM App Connect Enterprise IBM App Connect Enterprise is affected by 397 known vulnerabilities: 4 critical, 46 high, 256 medium, 91 low Critical High Medium Low

Vulnerabilities (397)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153013 - Interpretation Conflict
CVE-2026-92598
CWE-436 Medium
No
No
13.0.9.0 30.09.2026 SB20260930100
SB2026100106
#VU153012 - Interpretation Conflict
CVE-2026-92597
CWE-436 Medium
No
No
13.0.9.0 30.09.2026 SB20260930100
SB2026100106
#VU153011 - Inefficient Algorithmic Complexity
CVE-2026-92596
CWE-407 Medium
No
No
13.0.9.0 30.09.2026 SB20260930100
SB2026100106
#VU153010 - Server-Side Request Forgery (SSRF)
CVE-2026-92595
CWE-918 Low
No
No
13.0.9.0 30.09.2026 SB2026093099
SB2026100106
#VU146540 - Deserialization of Untrusted Data
CVE-2026-83557
CWE-502 Medium
No
No
12.0.12.30, 13.0.9.0 01.09.2026 SB2026090116
SB2026092909
SB2026092956
and 2 more
#VU144886 - Improper Validation of Certificate with Host Mismatch
CVE-2026-71290
CWE-297 High
No
No
13.0.8.2 24.08.2026 SB20260824163
SB2026090730
SB2026091582
and 3 more
#VU144885 - Missing Release of Resource after Effective Lifetime
CVE-2026-64607
CWE-772 Medium
No
No
13.0.8.2 24.08.2026 SB20260824161
SB2026090730
SB2026090780
and 2 more
#VU144594 - Resource exhaustion
CVE-2026-68497
CWE-400 Medium
No
No
12.0.12.30, 13.0.9.0 24.08.2026 SB2026082435
SB2026092909
SB2026092956
and 2 more
#VU144593 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-19032
CWE-470 Medium
No
No
12.0.12.30, 13.0.9.0 24.08.2026 SB2026082435
SB2026092909
SB2026092956
and 3 more
#VU140036 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-16729
CWE-74 Medium
No
No
13.0.9.0 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 4 more
#VU140035 - Use of Web Browser Cache Containing Sensitive Information
CVE-2026-13697
CWE-525 Medium
No
No
13.0.9.0 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 1 more
#VU140034 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-16728
CWE-444 Medium
No
No
13.0.9.0 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 4 more
#VU140033 - Interpretation Conflict
CVE-2026-14643
CWE-436 Medium
No
No
13.0.9.0 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 1 more
#VU140032 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-15157
CWE-93 Low
No
No
13.0.9.0 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 5 more
#VU135505 - Interpretation Conflict
CVE-2026-53655
CWE-436 Low
No
No
12.0.12.28, 13.0.8.0 26.06.2026 SB2026062676
SB2026072414
SB2026080659
#VU134755 - Use of Cache Containing Sensitive Information
CVE-2026-9678
CWE-524 Medium
No
No
13.0.9.0 17.06.2026 SB2026061760
SB2026082715
SB20260831117
and 7 more
#VU134484 - Uncontrolled Recursion
CVE-2026-54269
CWE-674 Medium
No
No
12.0.12.28, 13.0.8.0 13.06.2026 SB2026061305
SB2026072414
SB2026081028
#VU128399 - Improper Certificate Validation
CVE-2026-34477
CWE-295 Medium
No
No
12.0.12.26, 13.0.7.2 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 22 more
#VU127577 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-1527
CWE-93 Low
No
No
13.0.9.0 24.04.2026 SB20260424137
SB20260424148
SB20260424153
and 11 more
#VU67164 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-35948
CWE-93 Medium
No
No
13.0.9.0 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 8 more


Showing elements 41 - 60 out of 397