Known vulnerabilities in IBM App Connect for Healthcare

Known vulnerabilities in IBM App Connect for Healthcare

Vendor: IBM Corporation

Software: IBM App Connect for Healthcare

Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_for_healthcare:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 15

Public exploits: 4

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (15)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161	CWE-297	Medium	No	No	-	22.12.2025	SB2025122245 SB2026012084 SB2026012087 and 98 more
#VU113607 - Uncontrolled Recursion CVE-2025-48924	CWE-674	Medium	No	No	-	04.08.2025	SB2025080422 SB2025080423 SB2025080427 and 177 more
#VU111162 - Resource exhaustion CVE-2025-48976	CWE-400	Medium	Available	No	-	16.06.2025	SB2025061634 SB2025061635 SB2025061927 and 156 more
#VU85304 - Excessive Iteration CVE-2023-4043	CWE-834	Medium	No	No	-	11.01.2024	SB2024011123 SB2024012646 SB2024020506 and 15 more
#VU81098 - Improper input validation CVE-2013-2186	CWE-20	High	No	No	-	25.09.2023	SB2013102803 SB2023092623 SB2023101310 and 3 more
#VU80741 - Improper Certificate Validation CVE-2012-5783	CWE-295	Medium	No	No	-	13.09.2023	SB2023091335 SB2023091521 SB2023092013 and 20 more
#VU77073 - Improper Access Control CVE-2014-0107	CWE-284	Medium	No	No	-	07.06.2023	SB2014041609 SB2023090520 SB2023091914 and 6 more
#VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998	CWE-770	Medium	Available	No	-	20.02.2023	SB2023022046 SB2023022047 SB2023030917 and 202 more
#VU65495 - Improper input validation CVE-2022-34169	CWE-20	High	Available	No	-	20.07.2022	SB2022072046 SB2022072047 SB2022072140 and 137 more
#VU59693 - Deserialization of Untrusted Data CVE-2020-9493	CWE-502	High	No	No	-	18.01.2022	SB2021061626 SB2022011819 SB2022012640 and 62 more
#VU54943 - UNIX Symbolic Link (Symlink) Following CVE-2013-0248	CWE-61	Low	No	No	-	19.07.2021	SB2013031514 SB2021071906 SB2021120215 and 4 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	-	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more
#VU12312 - Deserialization of Untrusted Data CVE-2016-1000031	CWE-502	High	No	No	-	01.05.2018	SB2017111432 SB2018110601 SB2019051512 and 39 more
#VU5233 - Resource exhaustion CVE-2014-0050	CWE-400	Medium	Available	No	-	23.01.2017	SB2014020601 SB2015092620 SB2014041701 and 12 more
#VU197 - Resource exhaustion CVE-2016-3092	CWE-400	Medium	No	No	-	22.07.2016	SB2016070602 SB2016070203 SB2016063002 and 20 more