Product by IBM
App Connect Enterprise Cd
53 known vulnerabilities in App Connect Enterprise Cd (IBM), 0 of them actively exploited (CISA KEV).
Key figures
53
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-45447 | Heap Use-After-Free in the PKCS7_verify() Function | 8.8 | |
| High | CVE-2026-48933 | Node: Integer Overflow or Wraparound | 7.5 | |
| High | CVE-2024-34459 | XMLSoft libxml2: Buffer Over-read | 7.5 | |
| High | CVE-2026-48618 | Node: Improper Handling of Unicode Encoding | 6.5 | |
| High | CVE-2025-13151 | GnuTLS Libtasn1: Stack-Based Buffer Overflow | 7.5 | |
| Critical | CVE-2026-34182 | CMS AuthEnvelopedData Processing May Accept Forged Messages | 9.1 | |
| High | CVE-2026-15308 | Python Software Foundation CPython: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2026-42764 | NULL Pointer Dereference in QUIC Server Initial Packet Handling | 7.5 | |
| High | CVE-2026-34183 | Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler | 7.5 | |
| High | CVE-2026-34180 | Heap Buffer Over-read in ASN.1 Content Parsing | 7.5 | |
| High | CVE-2026-33416 | LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` | 7.5 | |
| High | CVE-2026-15709 | Red Hat Enterprise Linux: Improper Handling of Highly Compressed Data (Data Amplification) | 7.5 | |
| High | CVE-2026-7383 | Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion | 8.1 | |
| High | CVE-2026-15711 | Red Hat Enterprise Linux: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-12151 | undici WebSocket client vulnerable to denial of service via fragment count bypass | 7.5 | |
| Medium | CVE-2026-42766 | Possible NULL Dereference in Password-Based CMS Decryption | 5.9 | |
| High | CVE-2026-31790 | Incorrect Failure Handling in RSA KEM RSASVE Encapsulation | 6.5 | |
| High | CVE-2026-9076 | Out-of-Bounds Read in CMS Password-Based Decryption | 7.5 | |
| High | CVE-2026-45445 | AES-OCB IV Ignored on EVP_Cipher() Path | 7.5 | |
| High | CVE-2026-33636 | LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64 | 7.6 | |
| High | CVE-2026-48619 | Node: Uncontrolled Resource Consumption | 7.5 | |
| Critical | CVE-2026-58016 | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" | 7.5 | |
| Critical | CVE-2026-48930 | Node: Improper Access Control | 9.8 | |
| High | CVE-2025-66293 | LIBPNG has an out-of-bounds read in png_image_read_composite | 7.1 | |
| High | CVE-2026-9697 | undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent | 7.4 |
News
- Oracle’s July update fixes ten 10.0 vulnerabilities in Fusion Middlewarecsoonline,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 25sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 24sans-atrisk-mail,