CVE-2026-16180: falha de média gravidade em IBM App Connect Enterprise
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.7epss 0.3%
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service condition due to improper validation of XML entities.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
CVEs relacionadas — IBM App Connect Enterprise
No mesmo produto, das mais perigosas para as menos.
CVE-2022-42444MEDIUMIBM App Connect Enterprise denial of serviceEPSS 1.1%CVE-2024-22317CRITICALIBM App Connect Enterprise denial of serviceEPSS 1.0%CVE-2026-14522HIGHIBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settingsEPSS 1.0%CVE-2026-15435CRITICALIBM App Connect Enterprise is vulnerable to arbitrary file write vulnerabilityEPSS 0.7%CVE-2022-42439MEDIUMIBM App Connect Enterprise information disclosureEPSS 0.7%CVE-2026-14519HIGHIBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settingsEPSS 0.6%