CVE-2026-17444
5.3
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Summary
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | App Connect Enterprise | 13.0.1.0 <= 13.0.8.1 | affected |
| IBM | App Connect Enterprise | 12.0.1.0 <= 12.0.12.28 | affected |
| IBM | Integration Bus for z/OS | 10.1.0.0 <= 10.1.0.7 | affected |
Weaknesses
- CWE-611: CWE-611 Improper Restriction of XML External Entity Reference
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.