Description

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creating files they may not be aware of.

Severity (CVSS)

Base score4.7
SeverityMedium
VersionCVSS 3.1
VectorCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
Provided byCNA

Weaknesses

  • CWE-73 — CWE-73 External Control of File Name or Path

Affected products

VendorProductVersions
IBMApp Connect Enterprise13.0.1.0 to <=13.0.7.2; 12.0.1.0 to <=12.0.12.26
IBMIntegration Bus for z/OS10.1.0.0 to <=10.1.0.7

References

Authoritative sources

This page is a snapshot. For the latest enrichment and updates, view the record on CVE.org or the NVD.

Generated from the official CVE List on 01 Jul 2026 07:05 UTC.