CVE-2025-1993

CVE-2025-1993 affects IBM App Connect Enterprise Certified Container DesignerAuthoring instances where flows are stored in a database protected by weaker than expected cryptographic algorithms, potentially exposed to a local user. IBM bulletin (CVE-2025-1993) details affected products/versions: A...

CVE-2024-52362

CVE-2024-52362 affects IBM App Connect Enterprise Certified Container and related Operator/DesignerAuthoring components. The vulnerability arises from improper validation of server-side input, which could allow an authenticated user to cause a denial of service in the App Connect flow. Affected v...

CVE-2025-36133

CVE-2025-36133 affects IBM App Connect Enterprise Certified Container CDs: 9.2.0–11.6.0, 12.1.0–12.14.0, and 12.0 LTS (12.0.0–12.0.14). The vulnerability involves logging sensitive information during installation that could be read by a local container user, constituting a local information-discl...

CVE-2025-13490

CVE-2025-13490 affects IBM App Connect Operator CD versions 11.3.0–11.6.0, 12.1.0–12.20.0 and 12.0 LTS 12.0.0–12.0.20, plus IBM App Connect Enterprise Certified Containers operands CD 12.0.11.2‑r1–12.0.12.5‑r1 and 13.0.1.0‑r1–13.0.6.1‑r1 (and 12.0 LTS 12.0.12‑r1–12.0.12‑r20). The vulnerability is...