5.7
Medium
CVE-2026-16180 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS…
Description
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service condition due to improper validation of XML entities.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| App Connect Enterprise 13.0 | 13.0.1.0 → 13.0.8.1 | No fix stated |
| App Connect Enterprise 12.0 | 12.0.1.0 → 12.0.12.28 | No fix stated |
| Integration Bus for z/OS 10.1 | 10.1.0.0 → 10.1.0.7 | No fix stated |
Other CVEs of App Connect Enterprise
The 34 CVEs of App Connect Enterprise →
CVE-2026-92559
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due…
9.8
Critical
CVE-2026-17133
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
High
CVE-2026-17156
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
High
CVE-2026-17416
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
High