Advisories · Technology

IBM App Connect Enterprise.

Every CVE that names IBM App Connect Enterprise among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-92559 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

IBM App Connect Enterprise is vulnerable to a credential exposure
- IBM App Connect Enterprise
- CWE-1327
Not analysed yet 20 Oct 2026
CVE-2026-17133 CVE record

CVSS 7.8 High

IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
- IBM App Connect Enterprise
- Command injection
Not analysed yet 14 Sept 2026
CVE-2026-17156 CVE record

CVSS 7.8 High

IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
- IBM App Connect Enterprise
- Insecure deserialization
Not analysed yet 14 Sept 2026
CVE-2026-17416 CVE record

CVSS 7.8 High

IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
- IBM App Connect Enterprise
- Insecure deserialization
Not analysed yet 14 Sept 2026
CVE-2026-75624 CVE record

CVSS 8.8 High

IBM App Connect Enterprise is vulnerable to privilege escalation and Denial of Service
- IBM App Connect Enterprise
- Broken access control
Not analysed yet 10 Sept 2026
CVE-2026-16180 CVE record

CVSS 5.7 Medium

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- IBM App Connect Enterprise
- IBM Integration Bus for z/OS
- Denial of service
Not analysed yet 4 Sept 2026
CVE-2026-16689 CVE record

CVSS 6.2 Medium

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- IBM App Connect Enterprise
- IBM Integration Bus for z/OS
- Information disclosure
Not analysed yet 4 Sept 2026
CVE-2026-17440 CVE record

CVSS 5.5 Medium

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- IBM App Connect Enterprise
- IBM Integration Bus for z/OS
- Denial of service
Not analysed yet 4 Sept 2026
CVE-2026-17442 CVE record

CVSS 5.1 Medium

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- IBM App Connect Enterprise
- IBM Integration Bus for z/OS
- Information disclosure
Not analysed yet 4 Sept 2026
CVE-2026-17443 CVE record

CVSS 5.3 Medium

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- IBM App Connect Enterprise
- IBM Integration Bus for z/OS
- XML external entities (XXE)
Not analysed yet 4 Sept 2026
CVE-2026-17444 CVE record

CVSS 5.3 Medium

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- IBM App Connect Enterprise
- IBM Integration Bus for z/OS
- XML external entities (XXE)
Not analysed yet 4 Sept 2026
CVE-2026-19649 CVE record

CVSS 6.2 Medium

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- IBM App Connect Enterprise
- IBM Integration Bus for z/OS
- Information disclosure
Not analysed yet 4 Sept 2026
CVE-2026-78543 CVE record

CVSS 5.3 Medium

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- IBM App Connect Enterprise
- IBM Integration Bus for z/OS
- Denial of service
Not analysed yet 4 Sept 2026
CVE-2026-81832 CVE record

CVSS 7.7 High

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- IBM App Connect Enterprise
- IBM Integration Bus for z/OS
- XML external entities (XXE)
Not analysed yet 4 Sept 2026
CVE-2026-12947 CVE record

CVSS 7.5 High

IBM App Connect Enterprise is vulnerable to Confidentiality disclosure on Discovery Connector nodes
- IBM App Connect Enterprise
- Information disclosure
Not analysed yet 30 Jul 2026
CVE-2026-15435 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability
- IBM App Connect Enterprise
- Path traversal
Not analysed yet 30 Jul 2026
CVE-2026-14522 CVE record

CVSS 8.8 High

IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
- IBM App Connect Enterprise
- Command injection
Not analysed yet 30 Jul 2026
CVE-2026-14519 CVE record

CVSS 7.5 High

IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
- IBM App Connect Enterprise
- Path traversal
Not analysed yet 30 Jul 2026
CVE-2026-3602 CVE record

CVSS 4.7 Medium

IBM App Connect Enterprise and IBM Integration Bus for z/OS toolkit is vulnerable to an sql injection
- IBM App Connect Enterprise
- IBM Integration Bus for z/OS
- Path traversal
Not analysed yet 30 Jun 2026
CVE-2026-5515 CVE record

CVSS 5.5 Medium

IBM App Connect Enterprise is vulnerable to a confidential disclosure
- IBM App Connect Enterprise
- Information disclosure
Not analysed yet 27 May 2026
CVE-2025-36361 CVE record

CVSS 6.3 Medium

IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA
- IBM App Connect Enterprise
- Broken access control
Not analysed yet 24 Oct 2025
CVE-2025-0799 CVE record

CVSS 6.5 Medium

IBM App Connect Enterprise Arbitrary File Write
- IBM App Connect Enterprise
- Path traversal
Not analysed yet 6 Feb 2025
CVE-2024-49338 CVE record

CVSS 4.4 Medium

IBM App Connect Enterprise information disclosure
- IBM App Connect Enterprise
- CWE-1323
Not analysed yet 18 Jan 2025
CVE-2024-31894 CVE record

CVSS 4.3 Medium

IBM App Connect Enterprise information disclosure
- IBM App Connect Enterprise
- CWE-324
Not analysed yet 22 May 2024
CVE-2024-31895 CVE record

CVSS 4.3 Medium

IBM App Connect Enterprise information disclosure
- IBM App Connect Enterprise
- CWE-324
Not analysed yet 22 May 2024
CVE-2024-31893 CVE record

CVSS 4.3 Medium

IBM App Connect Enterprise information disclosure
- IBM App Connect Enterprise
- CWE-324
Not analysed yet 22 May 2024
CVE-2024-31904 CVE record

CVSS 6.5 Medium

IBM App Connect Enterprise denial of service
- IBM App Connect Enterprise
- CWE-248
Not analysed yet 22 May 2024
CVE-2024-28760 CVE record

CVSS 4.3 Medium

IBM App Connect Enterprise denial of service
- IBM App Connect Enterprise
- Denial of service
Not analysed yet 11 May 2024
CVE-2024-28761 CVE record

CVSS 5.4 Medium

IBM App Connect Enterprise HTML injection
- IBM App Connect Enterprise
- Cross-site scripting (XSS)
Not analysed yet 11 May 2024
CVE-2024-22356 CVE record

CVSS 4.9 Medium

IBM App Connect Enterprise and IBM Integration Bus for z/OS information disclosure
- IBM App Connect Enterprise
- IBM Integration Bus
- Other injection
Not analysed yet 26 Mar 2024
CVE-2024-22317 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

IBM App Connect Enterprise denial of service
- IBM App Connect Enterprise
- Authentication bypass
Not analysed yet 18 Jan 2024
CVE-2023-45176 CVE record

CVSS 6.2 Medium

IBM App Connect Enterprise and IBM Integration Bus denial of service
- IBM App Connect Enterprise
- IBM Integration Bus
- CWE-20
Not analysed yet 14 Oct 2023
CVE-2023-40682 CVE record

CVSS 4.4 Medium

IBM App Connect Enterprise information disclosure
- IBM App Connect Enterprise
- Information disclosure
Not analysed yet 13 Oct 2023
CVE-2022-42444 CVE record

CVSS 4.9 Medium

IBM App Connect Enterprise denial of service
- IBM App Connect Enterprise
- Memory corruption
Not analysed yet 6 Feb 2023
CVE-2022-42439 CVE record

CVSS 6.8 Medium

IBM App Connect Enterprise information disclosure
- IBM App Connect Enterprise
- Information disclosure
Not analysed yet 6 Feb 2023