CVE-2022-42439: IBM App Connect Enterprise

Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days.

IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party system’s credentials to be exposed to a privileged attacker. IBM X-Force ID: 238211.

Affected products

• IBM App Connect Enterprise: from 11.0.0.17, up to and including 11.0.0.19; version 12.0.4.0 only; version 12.0.5.0 only
• IBM App Connect Enterprise Certified Container: version 4.1 only; version 4.2 only; version 5.0 only; version 5.1 only; version 5.2 only; version 6.0 only

Published 2023-02-06. Last modified 2026-06-17.