ibm app connect enterprise
productUScpe:2.3:a:ibm:app_connect_enterprise:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
by severity
2critical4high20medium0low
updated 2026-10-28
01
vulnerabilities (31)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2022-42444US | medium6.5 | — |
| CVE-2024-22317US | critical9.1 | — |
| CVE-2026-14522US | critical9.8 | — |
| CVE-2026-15435US | — | — |
| CVE-2022-42439US | medium4.9 | — |
| CVE-2026-14519US | — | — |
| CVE-2026-78543US | high7.5 | — |
| CVE-2024-22356US | medium4.9 | — |
| CVE-2024-31904US | medium6.5 | — |
| CVE-2026-75624US | high8.8OT elevated | — |
| CVE-2025-0799US | — | — |
| CVE-2024-28760US | medium4.3 | — |
| CVE-2026-17444US | medium6.5 | — |
| CVE-2026-17443US | medium6.5 | — |
| CVE-2026-12947US | — | — |
| CVE-2024-49338US | medium4.9 | — |
| CVE-2026-81832US | high7.7 | — |
| CVE-2024-28761US | medium5.4 | — |
| CVE-2026-16180US | medium5.7 | — |
| CVE-2024-31895US | medium6.5 | — |
| CVE-2026-3602US | medium5.5 | — |
| CVE-2024-31894US | medium4.3 | — |
| CVE-2024-31893US | medium4.3 | — |
| CVE-2025-36361US | high8.8OT elevated | — |
| CVE-2023-40682US | medium4.4 | — |
| CVE-2023-45176US | medium5.5 | — |
| CVE-2026-16689US | medium5.5 | — |
| CVE-2026-19649US | medium5.5 | — |
| CVE-2026-17440US | medium5.5 | — |
| CVE-2026-17442US | medium5.5 | — |
| CVE-2026-5515US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-532Insertion of Sensitive Information into Log File7 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
- CWE-324Use of a Key Past its Expiration Date3 CVEs
- CWE-611Improper Restriction of XML External Entity Reference3 CVEs
- CWE-672Operation on a Resource after Expiration or Release3 CVEs
- CWE-320CWE-3202 CVEs
- CWE-116Improper Encoding or Escaping of Output1 CVEs
- CWE-117Improper Output Neutralization for Logs1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE31 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan