IBM App Connect Enterprise Certified Container vulnerabilities

13 CVEs affecting IBM App Connect Enterprise Certified Container, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-13491, published 2026-02-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-22404, published 2022-04-01. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may be vulnerable to denial of service due to excessive rate…
CVE-2022-31770, published 2022-07-05. Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days. IBM App Connect Enterprise Certified Container 4.2 could allow a user from the administration console to cause a denial of service by creating a specially crafted request. IBM X-Force ID: 228221.
CVE-2020-4785, published 2020-11-03. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. IBM App Connect Enterprise Certified Container 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a…
CVE-2022-42439, published 2023-02-06. Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days. IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party system’s…
CVE-2024-51465, published 2024-12-04. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. IBM App Connect Enterprise Certified Container 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, and 12.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a…
CVE-2022-43874, published 2023-03-15. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
CVE-2022-43915, published 2024-08-24. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12.1 does not limit calls to unshare in…
CVE-2022-43922, published 2023-02-01. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. …
CVE-2022-43916, published 2025-01-30. Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days. IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, and 12.7 Pods do…
CVE-2021-29759, published 2021-07-07. Low severity, CVSS 2.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, and 1.3 could allow a privileged user to obtain sensitive information from internal log files. IBM X-Force ID: 202212.

Latest

CVE-2025-13491, published 2026-02-05. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. IBM App Connect Enterprise Certified Container CD: 11.2.0 through 11.6.0, 12.1.0 through 12.19.0 and 12.0 LTS: 12.0.0 through 12.0.19 could allow an attacker to access sensitive files or modify…
CVE-2022-22491, published 2025-01-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, and 12.4 operands running in Red…