App Connect Enterprise
- Software type
- Data integration
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, App Connect Enterprise recorded 14 security vulnerabilities in the last 90 days, of which 6 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of App Connect Enterprise and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-18196IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injectionCVE-2026-18195IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injectionCVE-2026-18194IBM App Connect Enterprise is vulnerable to a clickjacking attackCVE-2026-18093IBM App Connect Enterprise is vulnerable to a credential exposureCVE-2026-17437IBM App Connect Enterprise is vulnerable to an arbitrary file write| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-18196IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection | Exploitation statusNot confirmed | FixYes |
| SeverityMedium |
CVE-2026-18195IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-18194IBM App Connect Enterprise is vulnerable to a clickjacking attack | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityLow |
|---|
CVE-2026-18093IBM App Connect Enterprise is vulnerable to a credential exposure | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-17437IBM App Connect Enterprise is vulnerable to an arbitrary file write | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-92559IBM App Connect Enterprise is vulnerable to a credential exposure | Exploitation statusNot exploited | FixYes | Published10/20/2026 | SeverityCritical |
|---|
CVE-2026-17416IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityHigh |
|---|
CVE-2026-17156IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityHigh |
|---|
CVE-2026-17133IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityHigh |
|---|
CVE-2026-75624IBM App Connect Enterprise is vulnerable to privilege escalation and Denial of Service | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityHigh |
|---|
CVE-2026-81832IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs | Exploitation statusNot exploited | FixYes | Published09/04/2026 | SeverityHigh |
|---|
CVE-2026-78543IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs | Exploitation statusNot exploited | FixYes | Published09/04/2026 | SeverityMedium |
|---|
CVE-2026-19649IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs | Exploitation statusNot exploited | FixYes | Published09/04/2026 | SeverityMedium |
|---|
CVE-2026-17444IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs | Exploitation statusNot exploited | FixYes | Published09/04/2026 | SeverityMedium |
|---|
CVE-2026-17443IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs | Exploitation statusNot exploited | FixYes | Published09/04/2026 | SeverityMedium |
|---|
CVE-2026-17442IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs | Exploitation statusNot exploited | FixYes | Published09/04/2026 | SeverityMedium |
|---|
CVE-2026-17440IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs | Exploitation statusNot exploited | FixYes | Published09/04/2026 | SeverityMedium |
|---|
CVE-2026-16689IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs | Exploitation statusNot exploited | FixYes | Published09/04/2026 | SeverityMedium |
|---|
CVE-2026-16180IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs | Exploitation statusNot exploited | FixYes | Published09/04/2026 | SeverityMedium |
|---|
CVE-2026-15435IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityCritical |
|---|
CVE-2026-14522IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-14519IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-12947IBM App Connect Enterprise is vulnerable to Confidentiality disclosure on Discovery Connector nodes | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-3602IBM App Connect Enterprise and IBM Integration Bus for z/OS toolkit is vulnerable to an sql injection | Exploitation statusNot exploited | FixYes | Published06/30/2026 | SeverityMedium |
|---|
CVE-2026-5515IBM App Connect Enterprise is vulnerable to a confidential disclosure | Exploitation statusNot exploited | FixYes | Published05/27/2026 | SeverityMedium |
|---|
CVE-2025-36361IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA | Exploitation statusNot exploited | FixYes | Published10/24/2025 | SeverityMedium |
|---|
CVE-2024-49338IBM App Connect Enterprise information disclosure | Exploitation statusNot exploited | FixYes | Published01/18/2025 | SeverityMedium |
|---|
CVE-2024-31904IBM App Connect Enterprise denial of service | Exploitation statusNot exploited | FixYes | Published05/22/2024 | SeverityMedium |
|---|
CVE-2024-31895IBM App Connect Enterprise information disclosure | Exploitation statusNot exploited | FixYes | Published05/22/2024 | SeverityMedium |
|---|
CVE-2024-31894IBM App Connect Enterprise information disclosure | Exploitation statusNot exploited | FixYes | Published05/22/2024 | SeverityMedium |
|---|
CVE-2024-31893IBM App Connect Enterprise information disclosure | Exploitation statusNot exploited | FixYes | Published05/22/2024 | SeverityMedium |
|---|
CVE-2024-28761IBM App Connect Enterprise HTML injection | Exploitation statusNot exploited | FixYes | Published05/11/2024 | SeverityMedium |
|---|
CVE-2024-28760IBM App Connect Enterprise denial of service | Exploitation statusNot exploited | FixYes | Published05/11/2024 | SeverityMedium |
|---|
CVE-2024-22356IBM App Connect Enterprise and IBM Integration Bus for z/OS information disclosure | Exploitation statusNot exploited | FixYes | Published03/26/2024 | SeverityMedium |
|---|
CVE-2024-22317IBM App Connect Enterprise denial of service | Exploitation statusNot exploited | FixYes | Published01/18/2024 | SeverityCritical |
|---|
CVE-2023-45176IBM App Connect Enterprise and IBM Integration Bus denial of service | Exploitation statusNot exploited | FixYes | Published10/14/2023 | SeverityMedium |
|---|
CVE-2023-40682IBM App Connect Enterprise information disclosure | Exploitation statusNot exploited | FixYes | Published10/13/2023 | SeverityMedium |
|---|
CVE-2022-42444IBM App Connect Enterprise denial of service | Exploitation statusNot exploited | FixYes | Published02/06/2023 | SeverityMedium |
|---|
CVE-2022-42439IBM App Connect Enterprise information disclosure | Exploitation statusNot exploited | FixYes | Published02/06/2023 | SeverityMedium |
|---|
34 Results | Page 1 of 1