9.1
Critical
CVE-2024-22317 IBM App Connect Enterprise 11.0.0.1 through 11.0.0.24 and 12.0.1.0 through 12.0.11.0 could allow a remote attacker to…
Description
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.24 and 12.0.1.0 through 12.0.11.0 could allow a remote attacker to obtain sensitive information or cause a denial of service due to improper restriction of excessive authentication attempts. IBM X-Force ID: 279143.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| App Connect Enterprise 12.0 | 12.0.1.0 → 12.0.11.0 | No fix stated |
| App Connect Enterprise 11.0 | 11.0.0.1 → 11.0.0.24 | No fix stated |
Other CVEs of App Connect Enterprise
The 39 CVEs of App Connect Enterprise →
CVE-2026-18196
IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection
5.4
Medium
CVE-2026-18195
IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection
4.2
Medium
CVE-2026-18194
IBM App Connect Enterprise is vulnerable to a clickjacking attack
2.5
Low
CVE-2026-18093
IBM App Connect Enterprise is vulnerable to a credential exposure
7.5
High