CVEvulnerability

CVE-2026-3602

5.5 MEDIUM Published 2026-06-30 Modified 2026-07-20 Official page ↗
Status
Modified
Published
2026-06-30
Last modified
2026-07-20
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weaknesses
CWE-73, CWE-89

Description

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creating files they may not be aware of.

Affected configurations

• ibm app connect enterprise (>= 12.0.1.0 < 12.0.12.27) • ibm app connect enterprise (>= 13.0.1.0 < 13.0.8.0) • ibm integration bus (>= 10.1.0.0 <= 10.1.0.7)

Related

Weakness · CWE (2)

  • CWE-73 External Control of File Name or Path weakness
  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References