Lucene search
K

8 matches found

Tenable Nessus
Tenable Nessus
added 2025/10/29 12:0 a.m.8 views

IBM App Connect Enterprise runtime lack of authorization (IWA) (7249061)

IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization. Note that Nessus has not tested for this issue but has instead relied only on the...

8.8CVSS5.4AI score0.00183EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/10/25 10:18 a.m.12 views

CVE-2025-36361

IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization...

8.8CVSS6.5AI score0.00183EPSS
Exploits0References1
OSV
OSV
added 2025/10/24 10:15 a.m.2 views

CVE-2025-36361

IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization...

8.8CVSS5.8AI score0.00183EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/24 9:35 a.m.6 views

CVE-2025-36361 IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA

IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization...

6.3CVSS0.00183EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/24 9:35 a.m.5 views

EUVD-2025-35825

IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization...

6.3CVSS6AI score0.00183EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/24 9:35 a.m.4 views

CVE-2025-36361 IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA

IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization...

6.3CVSS6.1AI score0.00183EPSS
Exploits0References1
CVE
CVE
added 2025/10/24 9:35 a.m.13 views

CVE-2025-36361

IBM App Connect Enterprise is affected by CVE-2025-36361: versions 13.0.1.0–13.0.4.2 and 12.0.1.0–12.0.12.17 allow an authenticated user to perform unauthorized actions on customer-defined resources due to missing authorization. Impact is described as lack of authorization affecting confidentiali...

8.8CVSS6.1AI score0.00183EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/24 12:0 a.m.4 views

PT-2025-43607

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise versions 12.0.1.0 through 12.0.12.17 IBM App Connect Enterprise versions 13.0.1.0 through 13.0.4.2 Description An authenticated user may be able to perform unauthorized actions on customer defined resources due to...

6.3CVSS6.3AI score0.00183EPSS
Exploits0References6
Rows per page
Query Builder