Skip to content
OpenAdvisories
High WID-SEC-2026-2580 3 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen

Published Jul 29, 2026 · Updated Jul 30, 2026 · Revision 2 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Informationen offenzulegen, um beliebigen Programmcode auszuführen, und um Dateien zu manipulieren.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 3

  • Critical 9.8
    CVE-2026-15435

    IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability

    IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write ar…

    IBM App Connect Enterprise
  • High 8.8
    CVE-2026-14522

    IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings

    IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters.

    IBM App Connect Enterprise
  • High 7.5
    CVE-2026-14519

    IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings

    IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to read arbitrary files due to a path traversal vulnerability.

    IBM App Connect Enterprise

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-51137, EUVD-2026-51136, EUVD-2026-51138

  2. #1

    Initiale Fassung

References