App Connect Enterprise vulnerabilities and CVEs

Known vulnerabilities affecting App Connect Enterprise, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.

5 vulnerabilities tracked.

7.5 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to broken access… CVE-2026-18093 8 Nov 2026
5.5 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.29 could allow a local attacker to perform an arbitrary… CVE-2026-17437 8 Nov 2026
5.4 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to inject arbitrary… CVE-2026-18196 8 Nov 2026
4.2 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to perform content… CVE-2026-18195 8 Nov 2026
2.5 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to perform unauthorized actions due to missing… CVE-2026-18194 8 Nov 2026

What this covers

This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that App Connect Enterprise is free of vulnerabilities.

Query this from an agent over MCP · Check a lockfile by version

Other products tracked here