Login Request a demo
AC
Product
App Connect Enterprise
by IBM · last CVE Oct 20, 2026
35
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities35In the news0Timeline
Severity mix
Critical 4High 9Medium 22Low 0
Severity
All severities35Critical4High9Medium22Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add App Connect Enterprise to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92559
9.8
1%
Oct 20
IBM App Connect Enterprise is vulnerable to a credential exposure
Affected: 13.0.1.0 through 13.0.8.2
CVE-2026-15435
9.8
1%
Jul 30
IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability
Affected: 13.0.1.0 through 13.0.7.2; 12.0.1.0 through 12.0.12.27
CVE-2026-14522
9.8
1%
Jul 30
IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
Affected: 13.0.1.0 through 13.0.7.2; 12.0.1.0 through 12.0.12.27
CVE-2024-22317
9.1
1%
Jan 18
IBM App Connect Enterprise denial of service
Affected: 11.0.0.1 through 11.0.0.24; 12.0.1.0 through 12.0.11.0
CVE-2026-75624
8.8
1%
Sep 10
IBM App Connect Enterprise is vulnerable to privilege escalation and Denial of Service
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.27
CVE-2025-36361
8.8
0%
Oct 24
IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA
Affected: 13.0.1.0 through 13.0.4.2; 12.0.1.0 through 12.0.12.17
CVE-2026-17133
7.8
0%
Sep 14
IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.0; 12.0.1.0 through 12.0.12.27
CVE-2026-17156
7.8
0%
Sep 14
IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.0; 12.0.1.0 through 12.0.12.27
CVE-2026-17416
7.8
0%
Sep 14
IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.0; 12.0.1.0 through 12.0.12.27
CVE-2026-81832
7.7
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-78543
7.5
1%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-12947
7.5
0%
Jul 30
IBM App Connect Enterprise is vulnerable to Confidentiality disclosure on Discovery Connector nodes
Affected: 13.0.1.0 through 13.0.7.2; 12.0.1.0 through 12.0.12.27
CVE-2026-14519
7.5
1%
Jul 30
IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings
Affected: 13.0.1.0 through 13.0.7.2; 12.0.1.0 through 12.0.12.27
CVE-2026-17443
6.5
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-17444
6.5
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2025-0799
6.5
0%
Feb 6
IBM App Connect Enterprise Arbitrary File Write
Affected: 12.0.1.0 through 12.0.12.10; 13.0.1.0 through 13.0.2.1
CVE-2024-31895
6.5
0%
May 22
IBM App Connect Enterprise information disclosure
Affected: 12.0.1.0 through 12.0.12.1
CVE-2024-31904
6.5
1%
May 22
IBM App Connect Enterprise denial of service
Affected: 11.0.0.1 through 11.0.0.25; 12.0.1.0 through 12.0.12.0
CVE-2022-42444
6.5
1%
Feb 12
IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow
Affected: 11.0.0.8 through 11.0.0.19; 12.0.1.0 through 12.0.5.0
CVE-2026-16180
5.7
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-16689
5.5
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-17440
5.5
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-17442
5.5
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-19649
5.5
0%
Sep 4
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Affected: 13.0.1.0 through 13.0.8.1; 12.0.1.0 through 12.0.12.28
CVE-2026-3602
5.5
0%
Jun 30
IBM App Connect Enterprise and IBM Integration Bus for z/OS toolkit is vulnerable to an sql injection
Affected: 13.0.1.0 through 13.0.7.2; 12.0.1.0 through 12.0.12.26
CVE-2026-5515
5.5
0%
May 27
IBM App Connect Enterprise is vulnerable to a confidential disclosure
Affected: 13.0.1.0 through 13.0.7.0
CVE-2023-45176
5.5
0%
Oct 14
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through 10.1.0.1 are vulnerable to a denial of service for…
Affected: 11.0.0.1 through 11.0.0.23; 12.0.1.0 through 12.0.10.0
CVE-2024-28761
5.4
0%
May 11
IBM App Connect Enterprise HTML injection
Affected: 11.0.0.1 through 11.0.0.25; 12.0.1.0 through 12.0.12.0
CVE-2024-49338
4.9
0%
Jan 18
IBM App Connect Enterprise information disclosure
Affected: 12.0.1.0 through 12.0.7.0; 13.0.1.0
CVE-2024-22356
4.9
1%
Mar 26
IBM App Connect Enterprise and IBM Integration Bus for z/OS information disclosure
Affected: 11.0.0.1 through 11.0.0.23; 12.0.1.0 through 12.0.9.0
CVE-2022-42439
4.9
1%
Feb 6
IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party…
Affected: 11.0.0.17 through 11.0.0.19; 12.0.4.0; 12.0.5.0
CVE-2023-40682
4.4
0%
Oct 13
IBM App Connect Enterprise 12.0.1.0 through 12.0.8.0 contains an unspecified vulnerability that could allow a local privileged user to obtain sensitive information from API logs
Affected: 12.0.1.0 before 12.0.9.0
CVE-2024-31894
4.3
0%
May 22
IBM App Connect Enterprise information disclosure
Affected: 12.0.1.0 through 12.0.12.1
CVE-2024-31893
4.3
0%
May 22
IBM App Connect Enterprise information disclosure
Affected: 12.0.1.0 through 12.0.12.1
CVE-2024-28760
4.3
0%
May 11
IBM App Connect Enterprise denial of service
Affected: 11.0.0.1 through 11.0.0.25; 12.0.1.0 through 12.0.12.0
Showing 35