9.8
Critical
CVE-2026-15435 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to…
Description
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| App Connect Enterprise 13.0 | 13.0.1.0 → 13.0.7.2 | No fix stated |
| App Connect Enterprise 12.0 | 12.0.1.0 → 12.0.12.27 | No fix stated |
Other CVEs of App Connect Enterprise
The 34 CVEs of App Connect Enterprise →
CVE-2026-92559
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due…
9.8
Critical
CVE-2026-17133
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
High
CVE-2026-17156
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
High
CVE-2026-17416
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
High