IBM App Connect Enterprise Multiple Vulnerabilities

CERT-Bund has released a security advisory (WID-SEC-2026-0772) concerning critical vulnerabilities in IBM App Connect Enterprise versions prior to 13.0.6.2 and 12.0.12.24. The vulnerabilities, rated with a CVSS Base Score of 9.3, can be exploited by remote attackers to achieve denial-of-service or bypass security measures, potentially leading to cross-site scripting (XSS) attacks. The advisory indicates that mitigation is available.

Organizations utilizing affected versions of IBM App Connect Enterprise should prioritize applying the available patches or updates to address these critical security flaws. Failure to do so could expose systems to significant risks, including unauthorized access and disruption of services. While a specific compliance deadline is not stated, immediate action is recommended to prevent exploitation.