Priority LOW 26
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service cond…
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00324 · Published 2026-09-04 · No fix listed CWE-776
Priority LOW 27
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to imprope…
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00147 · Published 2026-09-04 · No fix listed CWE-532
Priority LOW 24
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontroll…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00133 · Published 2026-09-04 · No fix listed CWE-674
Priority LOW 24
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credent…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00126 · Published 2026-09-04 · No fix listed CWE-532
Priority LOW 29
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00403 · Published 2026-09-04 · No fix listed CWE-611
Priority LOW 29
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00403 · Published 2026-09-04 · No fix listed CWE-611
Priority LOW 27
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to imprope…
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00147 · Published 2026-09-04 · No fix listed CWE-532
Priority MEDIUM 40
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infini…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00549 · Published 2026-09-04 · No fix listed CWE-835
Priority LOW 34
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 SAP Adapter is vulnerable to an XML external entity (XXE) attack.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00381 · Published 2026-09-04 · No fix listed CWE-611