


Perceptive Security
SOC/SIEM Consultancy

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An at…
Published:
29 July 2026 at 22:00:00
Alert date:
30 July 2026 at 16:04:07
Source:
nvd.nist.gov
Enterprise Applications, Web Technologies
A path traversal vulnerability has been identified in IBM App Connect Enterprise versions 13.0.1.0 through 13.0.7.2 and 12.0.1.0 through 12.0.12.27. The vulnerability allows a remote attacker to traverse directories on the affected system by sending specially crafted URL requests containing dot-dot sequences (/../). Successful exploitation enables an attacker to write arbitrary files on the system, which could lead to unauthorized file modification, code execution, or system compromise. The vulnerability is remotely exploitable without requiring physical access to the system. IBM has published a support advisory addressing the issue. Users of the affected versions are advised to apply patches or mitigations as provided by IBM. The vulnerability poses a high risk due to the potential for arbitrary file writes on enterprise integration systems.
Technical details
Mitigation steps:
Affected products:
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.27
Related links:
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
