IBM App Connect Enterprise 13.0.1.0-13.0.7.1

productDE

cpe:/a:ibm:app_connect_enterprise:13.0.1.0_-_13.0.7.1

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical3high2medium0low

updated 2026-10-27

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-39983US	—	2.19% (82nd)	Exploit	no fix	2026-04-09	—
CVE-2026-22008US	—	0.21% (11th)	Exploit	no fix	2026-04-21	—
CVE-2026-22003US	—	0.10% (1st)	Exploit	no fix	2026-04-21	—
CVE-2026-26278US	—	0.94% (61st)	—	no fix	2026-02-19	—
CVE-2026-20652US	high7.5	0.70% (53rd)	—	no fix	2026-02-11	—
CVE-2026-34282US	—	0.64% (50th)	—	no fix	2026-04-21	—
CVE-2026-33891US	—	0.61% (49th)	—	no fix	2026-03-27	—
CVE-2026-33036US	—	0.60% (48th)	—	no fix	2026-03-20	—
CVE-2026-33895US	—	0.53% (44th)	—	no fix	2026-03-27	—
CVE-2026-25896US	—	0.53% (44th)	—	no fix	2026-02-20	—
CVE-2026-33151US	high7.5	0.52% (44th)	—	no fix	2026-03-20	—
CVE-2026-39408US	high7.5	0.50% (43rd)	—	no fix	2026-04-08	—
CVE-2026-31988US	—	0.50% (43rd)	—	no fix	2026-03-11	—
CVE-2026-33894US	—	0.48% (41st)	—	no fix	2026-03-27	—
CVE-2026-33349US	—	0.47% (40th)	—	no fix	2026-03-24	—
CVE-2026-39407US	medium5.3	0.46% (40th)	—	no fix	2026-04-08	—
CVE-2026-26013US	—	0.43% (37th)	—	no fix	2026-02-10	—
CVE-2026-39406US	—	0.38% (31st)	—	no fix	2026-04-08	—
CVE-2026-33896US	critical9.1	0.36% (30th)	—	no fix	2026-03-27	—
CVE-2026-39409US	medium5.3	0.34% (28th)	—	no fix	2026-04-08	—
CVE-2026-39410US	—	0.28% (21st)	—	no fix	2026-04-08	—
CVE-2026-23865US	—	0.15% (4th)	—	no fix	2026-03-02	—

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-347Improper Verification of Cryptographic Signature2 CVEs
CWE-776Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')2 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-125Out-of-bounds Read1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.