IBM App Connect Enterprise <12.16.0

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical3high1medium0low

updated 2026-10-27

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-47076US	high8.6	79.9% (100th)	Exploit	no fix	2024-09-26	—
CVE-2024-47175US	critical9.8	63.6% (99th)	Exploit	no fix	2024-09-26	—
CVE-2025-58060US	—	1.00% (63rd)	Exploit	no fix	2025-09-11	—
CVE-2024-47177US	—	—	Exploit	no fix	2024-09-26	—
CVE-2025-5318US	—	1.84% (79th)	—	no fix	2025-06-24	—
CVE-2024-4032US	—	1.08% (65th)	—	no fix	2024-06-17	—
CVE-2024-0397US	—	0.81% (57th)	—	no fix	2024-06-17	—
CVE-2025-47906US	—	0.55% (46th)	—	no fix	2025-09-18	—
CVE-2025-5372US	high8.8	0.50% (43rd)	—	no fix	2025-07-04	—
CVE-2025-5914US	high7.8	0.47% (41st)	—	no fix	2025-06-09	—
CVE-2025-8941US	—	0.28% (20th)	—	no fix	2025-08-13	—
CVE-2025-4878US	—	0.23% (13th)	—	no fix	2025-07-22	—
CVE-2025-4877US	—	0.20% (10th)	—	no fix	2025-08-20	—
CVE-2025-36100US	medium5.5	0.10% (1st)	—	no fix	2025-09-07	—

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation4 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-260Password in Configuration File1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.