medium4.7
CVE-2026-3602
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable …
Impact
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creating files they may not be aware of.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | App Connect Enterprise | from 12.0.1.0 before 12.0.12.27 from 13.0.1.0 before 13.0.8.0 |
| Ibm | Integration Bus | from 10.1.0.0 through 10.1.0.7 |