6.3
Medium
CVE-2025-36361 IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated…
Description
IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| App Connect Enterprise 13.0 | 13.0.1.0 → 13.0.4.2 | No fix stated |
| App Connect Enterprise 12.0 | 12.0.1.0 → 12.0.12.17 | No fix stated |
Other CVEs of App Connect Enterprise
The 34 CVEs of App Connect Enterprise →
CVE-2026-92559
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due…
9.8
Critical
CVE-2026-17133
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
High
CVE-2026-17156
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
High
CVE-2026-17416
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
High