Skip to content

Known vulnerabilities in IBM App Connect Enterprise

Is your version affected?

CVE Summary Score Published
CVE-2026-18196 IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection 5.4 Medium Nov 8, 2026
CVE-2026-18195 IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection 4.2 Medium Nov 8, 2026
CVE-2026-18194 IBM App Connect Enterprise is vulnerable to a clickjacking attack 2.5 Low Nov 8, 2026
CVE-2026-18093 IBM App Connect Enterprise is vulnerable to a credential exposure 7.5 High Nov 8, 2026
CVE-2026-17437 IBM App Connect Enterprise is vulnerable to an arbitrary file write 5.5 Medium Nov 8, 2026
CVE-2026-92559 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due… 9.8 Critical Oct 20, 2026
CVE-2026-17133 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to… 7.8 High Sep 14, 2026
CVE-2026-17156 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to… 7.8 High Sep 14, 2026
CVE-2026-17416 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to… 7.8 High Sep 14, 2026
CVE-2026-75624 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated… 8.8 High Sep 10, 2026
CVE-2026-16180 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS… 5.7 Medium Sep 4, 2026
CVE-2026-16689 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS… 6.2 Medium Sep 4, 2026
CVE-2026-17440 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS… 5.5 Medium Sep 4, 2026
CVE-2026-17442 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS… 5.1 Medium Sep 4, 2026
CVE-2026-17443 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS… 5.3 Medium Sep 4, 2026
CVE-2026-17444 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS… 5.3 Medium Sep 4, 2026
CVE-2026-19649 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS… 6.2 Medium Sep 4, 2026
CVE-2026-78543 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS… 5.3 Medium Sep 4, 2026
CVE-2026-81832 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS… 7.7 High Sep 4, 2026
CVE-2026-12947 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive… 7.5 High Jul 30, 2026
CVE-2026-15435 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to… 9.8 Critical Jul 30, 2026
CVE-2026-14522 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to… 8.8 High Jul 30, 2026
CVE-2026-14519 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to… 7.5 High Jul 30, 2026
CVE-2026-3602 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS… 4.7 Medium Jun 30, 2026
CVE-2026-5515 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be… 5.5 Medium May 27, 2026

Other IBM products