Where
-Infinity
0

Trending

Last week
Last month
Last year

IBM App Connect OperatorIBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that report metrics are vulnerable to loss of confidentiality

Risk 35
Severity
5.9
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

IBM App Connect Enterprise Certified Container transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

1 / 2
Source: IBM

Remedy

IBM strongly suggests the following: App Connect Enterprise Certified Container up to 12.20.1 (Continuous Delivery) Upgrade to App Connect Enterprise Certified Container Operator version 12.21.0 or higher, and ensure that all DesignerAuthoring, IntegrationServer and IntegrationRuntime components are at 13.0.6.2-r1 or higher.  Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/13.0?topic=releases-upgrading-operator App Connect Enterprise Certified Container 12.0 LTS (Long Term Support) Upgrade to App Connect Enterprise Certified Container Operator version 12.0.21 or higher, and ensure that all DesignerAuthoring, IntegrationServer and IntegrationRuntime components are at 12.0.12-r21 or higher.  Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/12.0?topic=umfpr-upgrading-operator-releases
First published (updated )
CVE-2025-13490

IBM App Connect Enterprise Certified ContainerIBM App Connect Enterprise information disclosure

Risk 34
Severity
5.9
AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

IBM App Connect Enterprise Certified Container CD: 9.2.0 through 11.6.0, 12.1.0 through 12.14.0, and 12.0 LTS: 12.0.0 through 12.0.14stores potentially sensitive information in log files during installation that could be read by a local user on the container.

1 / 2
Source: MITRE
First published (updated )
CVE-2025-36133

IBM App Connect Enterprise Certified ContainerIBM App Connect Enterprise Certified Container denial of service

Risk 38
Severity
6.5
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

IBM App Connect Enterprise Certified Container 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, and 12.8 could allow an authenticated user to cause a denial of service in the App Connect flow due to improper validation of server-side input.

1 / 2
Source: MITRE
First published (updated )
CVE-2024-52362

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203