Changeflow GovPing Data Privacy & Cybersecurity IBM App Connect Enterprise Multiple DoS Vulnera...
Priority review Notice Added Final

IBM App Connect Enterprise Multiple DoS Vulnerabilities

Favicon for wid.cert-bund.de CERT-Bund Security Advisories
Published March 29th, 2026
Detected March 31st, 2026
Email

Summary

CERT-Bund issued a security advisory (WID-SEC-2026-0903) disclosing multiple denial-of-service vulnerabilities in IBM App Connect Enterprise with a CVSS Base Score of 7.5 (high) and Temporal Score of 6.5 (medium). Affected versions are those prior to 12.0.12.24 and 13.0.7.0. Remote, unauthenticated attackers can exploit these vulnerabilities to conduct DoS attacks against affected installations.

View original document View source feed page

What changed

CERT-Bund published advisory WID-SEC-2026-0903 identifying multiple DoS vulnerabilities in IBM App Connect Enterprise, versions prior to 12.0.12.24 and 13.0.7.0. The vulnerabilities carry a CVSS Base Score of 7.5 (high) and a Temporal Score of 6.5 (medium). A remote, anonymous attacker can exploit the flaws to cause denial-of-service conditions without authentication.

Organizations running IBM App Connect Enterprise must immediately identify whether their installations are affected and apply the vendor-provided patches (upgrade to version 12.0.12.24 or 13.0.7.0) or implement the recommended mitigations. Failure to address these vulnerabilities could expose integration and middleware infrastructure to service disruptions.

What to do next

  1. Identify any IBM App Connect Enterprise installations within your infrastructure
  2. Check installed versions against the affected thresholds (prior to 12.0.12.24 or 13.0.7.0)
  3. Apply vendor patches to upgrade to a secure version or implement compensating mitigations

Source document (simplified)

[WID-SEC-2026-0903] IBM App Connect Enterprise: Mehrere Schwachstellen ermöglichen Denial of Service CVSS Base Score 7.5 (hoch) CVSS Temporal Score 6.5 (mittel) Remoteangriff ja Datum 29.03.2026 Stand 30.03.2026 Mitigation ja

Betroffene Systeme

Betriebssystem

  • Linux
  • UNIX
  • Windows

Produktbeschreibung

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Produkte

29.03.2026
- IBM App Connect Enterprise <12.0.12.24

  • IBM App Connect Enterprise <13.0.7.0

Angriff

Angriff

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen. CVE Informationen Versionshistorie Feedback zum Advisory geben

Named provisions

Betroffene Systeme Angriff Mitigation

Related changes

Favicon for wid.cert-bund.de Symantec Data Loss Prevention Privilege Escalation Vulnerability
Priority review Mar 31, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for wid.cert-bund.de MongoDB DoS Vulnerability Advisory - CVSS 5.3
Routine Mar 31, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for wid.cert-bund.de IBM DataPower Gateway Multiple Vulnerabilities Allow DoS and Data Manipulation
Priority review Mar 31, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for changeflow.com Zero-Trust Policy Generation via Application Segmentation
Routine Mar 31, 2026 • ChangeBridge: Patent Grants - Networking (H04L) • Telecom & Technology
Favicon for www.cisa.gov Critical Authentication Bypass in PX4 Autopilot MAVLink Protocol
Urgent Mar 31, 2026 • CISA ICS-CERT Advisories • Data Privacy & Cybersecurity
Favicon for www.cisa.gov Critical Authentication Bypass Vulnerability in Anritsu Remote Spectrum Monitor
Urgent Mar 31, 2026 • CISA ICS-CERT Advisories • Data Privacy & Cybersecurity

Source

Favicon for wid.cert-bund.de
CERT-Bund Security Advisories wid.cert-bund.de/content/public/securityAdvisory/rss
Data Privacy & Cybersecurity
Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
CERT-Bund
Published
March 29th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Minor
Document ID
WID-SEC-2026-0903

Who this affects

Applies to
Technology companies Government agencies
Industry sector
5112 Software & Technology
Activity scope
Vulnerability Management IT Infrastructure Security
Threshold
IBM App Connect Enterprise versions <12.0.12.24 and <13.0.7.0 on Linux, UNIX, or Windows
Geographic scope
Germany DE

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Topics
Data Privacy Information Security

Browse Categories

Agriculture & Food Safety 63 AI Regulation 3 Banking & Finance 266 Consumer & Competition 1 Consumer Protection 44 Courts & Legal 360 Data Privacy & Cybersecurity 74 Defense & National Security 52 Education 20 Energy 107 Environment 85 Government & Legislation 327 Healthcare 136 Housing 16 Immigration 9 Insurance 58 Labor & Employment 114 Legal & Courts 1 Pharma & Drug Safety 103 Securities & Markets 104 Tax 65 Tax & Revenue 1 Telecom & Technology 47 Trade & Sanctions 124 Transportation 57

Get Data Privacy & Cybersecurity alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when CERT-Bund Security Advisories publishes new changes.

Optional. Personalizes your daily digest.

Free. Unsubscribe anytime.