Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

31 records in App Connect Enterprise · all components

TI-2024-14904 CVE-2024-22317 · GHSA-rcrf-j4mf-2fp6

IBM App Connect Enterprise denial of service

Priority MEDIUM 47

IBM App Connect Enterprise 11.0.0.1 through 11.0.0.24 and 12.0.1.0 through 12.0.11.0 could allow a remote attacker to obtain sensitive information or cause a denial of service due to improper restriction of excessive aut…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01025 Published 2024-01-18 No fix listed CWE-307
TI-2026-12258 CVE-2026-14522 · GHSA-mxjf-vf32-q4pq

IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings

Priority MEDIUM 45

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01016 Published 2026-07-30 No fix listed CWE-78
TI-2026-54614 CVE-2026-78543 · GHSA-3x6q-qhf5-8m4j

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

Priority MEDIUM 40

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infini…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00549 Published 2026-09-04 No fix listed CWE-835
TI-2025-24807 CVE-2025-36361 · GHSA-jxm3-88rp-cq73

IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA

Priority LOW 37

IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00219 Published 2025-10-24 No fix listed CWE-862
TI-2026-56459 CVE-2026-81832 · GHSA-273w-f4pj-3j77

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

Priority LOW 34

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 SAP Adapter is vulnerable to an XML external entity (XXE) attack.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00381 Published 2026-09-04 No fix listed CWE-611
TI-2022-20645 CVE-2022-42444 · GHSA-j63j-9fw8-qxw3

IBM App Connect Enterprise denial of service

Priority LOW 31

IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01129 Published 2023-02-06 Fixed in 11.0.0.19, 12.0.5.0 CWE-121
TI-2022-20642 CVE-2022-42439 · GHSA-chpv-rv7m-7qxg

IBM App Connect Enterprise information disclosure

Priority LOW 31

IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party system’s credentials to be exposed to a…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00671 Published 2023-02-06 Fixed in 11.0.0.19, 12.0.5.0 CWE-200
TI-2026-14334 CVE-2026-17444 · GHSA-69vg-6775-v3qm

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

Priority LOW 29

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00403 Published 2026-09-04 No fix listed CWE-611
TI-2026-14333 CVE-2026-17443 · GHSA-v53j-r3c3-j92c

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

Priority LOW 29

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00403 Published 2026-09-04 No fix listed CWE-611
TI-2025-00672 CVE-2025-0799 · GHSA-mrmh-6jc5-mv8x

IBM App Connect Enterprise Arbitrary File Write

Priority LOW 29

IBM App Connect enterprise 12.0.1.0 through 12.0.12.10 and 13.0.1.0 through 13.0.2.1 could allow an authenticated user to write to an arbitrary file on the system during bar configuration deployment due to improper pathn…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00497 Published 2025-02-06 No fix listed CWE-22
TI-2024-21013 CVE-2024-31904 · GHSA-xf76-hprf-f3vm

IBM App Connect Enterprise denial of service

Priority LOW 29

IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 integration nodes could allow an authenticated user to cause a denial of service due to an uncaught exception.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00516 Published 2024-05-22 No fix listed CWE-248
TI-2024-21006 CVE-2024-31895 · GHSA-www9-grm3-8mc4

IBM App Connect Enterprise information disclosure

Priority LOW 29

IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00275 Published 2024-05-22 No fix listed CWE-324
TI-2026-15956 CVE-2026-19649 · GHSA-rj65-2qmm-2mq9

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

Priority LOW 27

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to imprope…

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00147 Published 2026-09-04 No fix listed CWE-532
TI-2026-13913 CVE-2026-16689 · GHSA-256x-7q8g-xjmc

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

Priority LOW 27

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to imprope…

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00147 Published 2026-09-04 No fix listed CWE-532
TI-2023-24191 CVE-2023-45176 · GHSA-qgm6-p3q3-r5mp

IBM App Connect Enterprise and IBM Integration Bus denial of service

Priority LOW 27

IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through 10.1.0.1 are vulnerable to a denial of service for integration nodes on Windows.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00183 Published 2023-10-14 No fix listed CWE-20
TI-2026-13526 CVE-2026-16180 · GHSA-gv9r-vxw2-5527

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

Priority LOW 26

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service cond…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00324 Published 2026-09-04 No fix listed CWE-776
TI-2026-14332 CVE-2026-17442 · GHSA-9cqm-q2hj-45r7

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

Priority LOW 24

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credent…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00126 Published 2026-09-04 No fix listed CWE-532
TI-2026-14331 CVE-2026-17440 · GHSA-g698-32cx-8794

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

Priority LOW 24

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontroll…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00133 Published 2026-09-04 No fix listed CWE-674
TI-2024-18994 CVE-2024-28761 · GHSA-rrxx-mf3x-75gw

IBM App Connect Enterprise HTML injection

Priority LOW 24

IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0033 Published 2024-05-11 No fix listed CWE-79
Load more
Open these records in search →