Known vulnerabilities in IBM App Connect Enterprise - page 6
Vendor:
IBM Corporation
Software:
IBM App Connect Enterprise
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_app_connect_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
397
Public exploits:
34
Known exploited (KEV):
4
Breakdown by Severity Chart
12.0.12.29
12.0.12.30
13.0.9.0
13.0.8.1
13.0.8.2
12.0.12.27
12.0.12.28
13.0.8.0
12.0.12.26
13.0.7.2
13.0.7.0
13.0.7.1
12.0.12.25
12.0.12.24
13.0.6.2
12.0.12.23
13.0.6.1
12.0.12.22
12.0.12.21
13.0.6.0
12.0.12.20
13.0.5.2
12.0.12.19
12.0.12.18
13.0.5.0
12.0.16
12.15.0
13.0.4.2
12.0.12.17
13.0.4.1
12.0.12.12
12.0.12.16
12.0.13
12.13.0
12.0.12.15
13.0.4.0
12.0.12
12.12.0
12.0.12.13
12.0.12.14
13.0.3.1
13.0.3.0
12.0.10
12.10.1
12.9.0
12.0.9
12.0.12.11
13.0.2.2
12.0.12.10
13.0.2.1
12.0.12.9
13.0.2.0
13.0.1.0
12.0.12.8
13.0.1.1
12.0.12.7
12.0.12.6
12.0.12.5
12.0.12.4
12.0.12.3
12.0.12.2
12.0.12.1
11.0.0.26
12.0.12.0
12.0.11.3
11.0.0.25
12.0.11.2
10.1.0.2
12.0.11.0
11.0.0.24
12.0.11.1
12.0.10.1
11.0.0.23
12.0.10.0
11.0.0.22
12.0.9.0
11.0.0.21
12.0.8.0
11.0.0.20
12.0.7.0
11.0.0.19
12.0.6.0
10.0.0.26
12.0.5.0
11.0.0.18
11.0.0.17
12.0.4.0
11.0.0.16
10.0.0.25
10.0.0.24
10.0.0.23
10.0.0.22
10.0.0.21
10.0.0.20
10.0.0.19
10.0.0.18
10.0.0.17
10.0.0.16
10.0.0.15
10.0.0.14
12.0.3.0
11.0.0.15
11.0.0.13
11.0.0.12
11.0.0.11
11.0.0.10
11.0.0.9
11.0.0.8
11.0.0.7
11.0.0.6
11.0.0.5
11.0.0.4
11.0.0.3
11.0.0.2
11.0.0.1
11.0.0.0
12.0.2.0
11.0.0.14
12.0.1.0
12.0.0.0
10.0.0.13
10.0.0.12
10.0.0.11
10.0.0.10
10.0.0.9
10.0.0.8
10.0.0.7
10.0.0.6
10.0.0.5
10.0.0.4
10.0.0.3
10.0.0.2
10.0.0.1
10.0.0.0
Vulnerabilities (397)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU115167 - Allocation of Resources Without Limits or Throttling CVE-2025-58754 |
CWE-770 | Medium | 12.0.12.18, 13.0.5.0 | 12.09.2025 |
SB2025091204 SB2025100104 SB2025100912 and 52 more |
||
| #VU114434 - Deserialization of Untrusted Data CVE-2025-27819 |
CWE-502 | High | 12.0.12.16, 13.0.4.1 | 26.08.2025 |
SB2025082612 SB2025082623 SB2025100118 and 4 more |
||
| #VU113227 - Uncaught Exception CVE-2025-48997 |
CWE-248 | Medium | 12.0.12.16, 13.0.4.0 | 25.07.2025 |
SB2025072557 SB2025072558 SB2025082202 and 9 more |
||
| #VU113173 - Use of Insufficiently Random Values CVE-2025-7783 |
CWE-330 | Medium | 12.0.16, 12.15.0 | 23.07.2025 |
SB2025072332 SB2025072333 SB2025081876 and 63 more |
||
| #VU112890 - Inefficient Regular Expression Complexity CVE-2025-5889 |
CWE-1333 | Low | 12.0.12.16, 13.0.4.0 | 15.07.2025 |
SB2025071511 SB2025071512 SB2025071513 and 34 more |
||
| #VU112255 - Deserialization of Untrusted Data CVE-2025-27818 |
CWE-502 | Medium | 12.0.12.16, 13.0.4.1 | 04.07.2025 |
SB20250704102 SB2025070708 SB2025080519 and 16 more |
||
| #VU112146 - Server-Side Request Forgery (SSRF) CVE-2025-27817 |
CWE-918 | High | 12.0.12.16, 13.0.4.1 | 03.07.2025 |
SB2025070339 SB2025070340 SB2025070345 and 42 more |
||
| #VU109243 - Missing release of memory after effective lifetime CVE-2025-23165 |
CWE-401 | Low | 12.0.12.16, 13.0.4.1 | 16.05.2025 |
SB2025051605 SB2025051901 SB2025051902 and 17 more |
||
| #VU109241 - Error Handling CVE-2025-23166 |
CWE-388 | Medium | 12.0.12.16, 13.0.4.1 | 16.05.2025 |
SB2025051605 SB2025051901 SB2025051902 and 31 more |
||
| #VU108915 - Improper preservation of permissions CVE-2025-24791 |
CWE-281 | Low | 12.0.12.12, 13.0.3.0 | 12.05.2025 |
SB2025051225 SB2025051226 SB2025073017 |
||
| #VU108745 - Integer overflow CVE-2025-29087 |
CWE-190 | Medium | 12.0.13, 12.13.0 | 07.05.2025 |
SB2025050709 SB2025050710 SB2025050714 and 14 more |
||
| #VU107638 - Improper Control of Generation of Code ('Code Injection') CVE-2025-1302 |
CWE-94 | Critical | 12.0.12.12, 13.0.3.0 | 22.04.2025 |
SB2025042218 SB2025042219 SB2025050906 and 8 more |
||
| #VU107155 - Use After Free CVE-2025-31498 |
CWE-416 | High | 12.0.13, 12.13.0 | 08.04.2025 |
SB2025040846 SB2025040925 SB2025040926 and 18 more |
||
| #VU104044 - Resource exhaustion CVE-2024-12243 |
CWE-400 | Medium | 12.0.13, 12.13.0 | 18.02.2025 |
SB2025021831 SB2025021832 SB2025021835 and 65 more |
||
| #VU103980 - Resource exhaustion CVE-2024-12133 |
CWE-400 | Medium | 12.0.13, 12.13.0 | 14.02.2025 |
SB2025021428 SB2025021429 SB2025021430 and 78 more |
||
| #VU103504 - Out-of-bounds write CVE-2025-24528 |
CWE-787 | Medium | 12.0.13, 12.13.0 | 03.02.2025 |
SB2025020331 SB2025020352 SB2025020412 and 49 more |
||
| #VU100117 - Improper input validation CVE-2024-21534 |
CWE-20 | High | 12.0.12.8, 12.0.12.12, 13.0.1.1, 13.0.3.0 | 08.11.2024 |
SB2024110840 SB2024110841 SB2024111516 and 17 more |
||
| #VU78253 - Origin Validation Error CVE-2019-11777 |
CWE-346 | Medium | 12.0.12.17, 13.0.4.2 | 14.07.2023 |
SB2023071415 SB2023092720 SB2023092722 and 4 more |
||
| #VU72123 - Deserialization of Untrusted Data CVE-2023-25194 |
CWE-502 | Low | 12.0.12.16, 13.0.4.1 | 11.02.2023 |
SB2023021101 SB2023030952 SB2023040419 and 40 more |
||
| #VU55534 - Improper input validation CVE-2021-32796 |
CWE-20 | Medium | 12.0.12.17, 13.0.4.1 | 03.08.2021 |
SB2021080308 SB2025082522 SB2025082721 and 4 more |
Showing elements 101 - 120 out of 397