App Connect Enterprise vulnerabilitiesRanked by how likely they are to be used.
App Connect Enterprise is made by IBM. We track 13 published vulnerabilities listed under that exact name, across 54 versions. None of them is on the list of flaws known to be exploited today. IBM lists newer releases under their own names, such as App Connect Enterprise Certified Container, so check those pages too.
We keep watching the known-exploited list.
Is App Connect Enterprise listed under other names? Yes.
IBM also lists App Connect Enterprise under more specific names, such as App Connect Enterprise Certified Container and App Connect Enterprise Certified Containers Operands. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
Which App Connect Enterprise vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of App Connect Enterprise's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which App Connect Enterprise flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 1.1%CVE-2022-42444Medium
IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow.
- 1.0%CVE-2024-22317Critical
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.24 and 12.0.1.0 through 12.0.11.0 could allow a remote attacker to obtain sensitive information or cause a denial of service due to improper restriction of excessive...
- 0.7%CVE-2022-42439Medium
IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party system’s credentials to be exposed...
- 0.5%CVE-2024-22356Medium
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1 through 10.1.0.2store potentially sensitive information in log or trace files that could be read...
- 0.5%CVE-2024-31904Medium
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 integration nodes could allow an authenticated user to cause a denial of service due to an uncaught exception.
- 0.5%CVE-2024-28760Medium
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 dashboard is vulnerable to a denial of service due to improper restrictions of resource allocation.
- 0.3%CVE-2024-28761Medium
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection.
- 0.3%CVE-2024-31895Medium
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token.
- 0.3%CVE-2024-31894Medium
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token.
- 0.3%CVE-2024-31893Medium
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive calendar information using an expired access token.
Running App Connect Enterprise? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user could overflow a buffer and cause the application to crash. IBM X-Force ID: 238538.
- Matched to
- App Connect Enterprise on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 13 published vulnerabilities listed under the name App Connect Enterprise, across 54 versions.
None of App Connect Enterprise's vulnerabilities is on the list of flaws known to be exploited today.
IBM also lists App Connect Enterprise under more specific names, such as App Connect Enterprise Certified Container and App Connect Enterprise Certified Containers Operands. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Create a EdgeProtect account and track App Connect Enterprise. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.