medium5.3
CVE-2026-17444
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a …
Impact
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | App Connect Enterprise | from 12.0.1.0 before 12.0.12.29 from 13.0.1.0 before 13.0.8.2 |
| Ibm | Integration Bus For Z\/Os | from 10.1.0.0 through 10.1.0.7 |