5.4
Medium
CVE-2024-28761 IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection
Description
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 285245.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| App Connect Enterprise 12.0 | 12.0.1.0 → 12.0.12.0 | No fix stated |
| App Connect Enterprise 11.0 | 11.0.0.1 → 11.0.0.25 | No fix stated |
Other CVEs of App Connect Enterprise
The 39 CVEs of App Connect Enterprise →
CVE-2026-18196
IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection
5.4
Medium
CVE-2026-18195
IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection
4.2
Medium
CVE-2026-18194
IBM App Connect Enterprise is vulnerable to a clickjacking attack
2.5
Low
CVE-2026-18093
IBM App Connect Enterprise is vulnerable to a credential exposure
7.5
High