Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (60 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-109158 1 Ibm 2 App Connect Enterprise Certified Containers Operands, App Connect Operator 2026-11-13 7.5 High
IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands may allow the AI Agent to log sensitive information about the deployed environment within error messages.
CVE-2026-114468 1 Ibm 2 App Connect Enterprise Certified Containers Operands, App Connect Operator 2026-11-13 6 Medium
IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.
CVE-2026-115788 1 Ibm 2 App Connect Enterprise Certified Containers Operands, App Connect Operator 2026-11-13 8.1 High
IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log Forging on a request to create a resource.
CVE-2026-17437 1 Ibm 1 App Connect Enterprise 2026-11-10 5.5 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.29 could allow a local attacker to perform an arbitrary file write due to improper validation of pathnames during archive extraction.
CVE-2026-18093 1 Ibm 1 App Connect Enterprise 2026-11-10 7.5 High
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to broken access control.
CVE-2026-18194 1 Ibm 1 App Connect Enterprise 2026-11-10 2.5 Low
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to perform unauthorized actions due to missing anti-clickjacking controls.
CVE-2026-18195 1 Ibm 1 App Connect Enterprise 2026-11-10 4.2 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to perform content spoofing due to improper output encoding of error messages.
CVE-2026-18196 1 Ibm 1 App Connect Enterprise 2026-11-10 5.4 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to inject arbitrary HTML due to improper output neutralization.
CVE-2026-92559 1 Ibm 1 App Connect Enterprise 2026-10-23 9.8 Critical
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address.
CVE-2026-75624 3 Ibm, Linux, Microsoft 4 Aix, App Connect Enterprise, Linux Kernel and 1 more 2026-09-16 8.8 High
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to incorrect authorization.
CVE-2026-17416 1 Ibm 1 App Connect Enterprise 2026-09-15 7.8 High
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization.
CVE-2026-17133 1 Ibm 1 App Connect Enterprise 2026-09-15 7.8 High
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-17156 1 Ibm 1 App Connect Enterprise 2026-09-14 7.8 High
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization.
CVE-2026-17444 1 Ibm 3 App Connect Enterprise, Integration Bus For Z\/os, Integration Bus For Zos 2026-09-10 5.3 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.
CVE-2026-17442 1 Ibm 3 App Connect Enterprise, Integration Bus For Z\/os, Integration Bus For Zos 2026-09-10 5.1 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext.
CVE-2026-17443 1 Ibm 3 App Connect Enterprise, Integration Bus For Z\/os, Integration Bus For Zos 2026-09-09 5.3 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
CVE-2026-19649 1 Ibm 3 App Connect Enterprise, Integration Bus For Z\/os, Integration Bus For Zos 2026-09-09 6.2 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of database credentials.
CVE-2026-78543 1 Ibm 3 App Connect Enterprise, Integration Bus For Z\/os, Integration Bus For Zos 2026-09-09 5.3 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infinite loop.
CVE-2026-16180 1 Ibm 3 App Connect Enterprise, Integration Bus For Z\/os, Integration Bus For Zos 2026-09-09 5.7 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service condition due to improper validation of XML entities.
CVE-2026-17440 1 Ibm 3 App Connect Enterprise, Integration Bus For Z\/os, Integration Bus For Zos 2026-09-09 5.5 Medium
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontrolled recursion.