IBM App Connect Enterprise Certified Container

Name: IBM App Connect Enterprise Certified Container
Brand: IBM

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical1high9medium1low

updated 2026-10-28

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-22404US	medium6.5	0.98% (62nd)	—	no fix	2022-04-01	5 versions
CVE-2022-31770US	medium4.9	0.93% (60th)	—	no fix	2022-07-05	≤ 4.2
CVE-2020-4785US	medium5.4	0.67% (52nd)	—	no fix	2020-11-03	5 versions
CVE-2024-51465US	—	0.66% (51st)	—	no fix	2024-12-04	≤ 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3
CVE-2024-52362US	medium6.5	0.48% (41st)	—	no fix	2025-03-12	≤ 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, 12.8
CVE-2022-43874US	medium6.1	0.39% (33rd)	—	no fix	2023-03-15	≤ 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, 7.0
CVE-2022-43915US	high8.1	0.39% (33rd)	—	no fix	2024-08-24	≤ 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1
CVE-2022-43922US	medium6.5	0.36% (29th)	—	no fix	2023-02-01	≤ 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2
CVE-2022-43916US	critical9.1	0.27% (20th)	—	no fix	2025-01-30	≤ 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7
CVE-2021-29759US	low2.3	0.26% (18th)	—	no fix	2021-07-07	4 versions
CVE-2021-29906US	medium5.5	0.22% (13th)	—	no fix	2021-10-08	11 versions
CVE-2025-13491US	—	0.17% (6th)	—	no fix	2026-02-05	3 versions
CVE-2022-22491US	—	0.16% (5th)	—	no fix	2025-01-09	≤ 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4
CVE-2025-1993US	medium5.5	0.13% (3rd)	—	no fix	2025-05-09	26 versions
CVE-2025-36133US	medium5.5	0.11% (1st)	—	no fix	2025-09-01	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-532Insertion of Sensitive Information into Log File2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames1 CVEs
CWE-1286Improper Validation of Syntactic Correctness of Input1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-264CWE-2641 CVEs
CWE-326Inadequate Encryption Strength1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)15 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan