top of page
perceptive_background_267k.jpg

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An at…

Published:

29 July 2026 at 22:00:00

Alert date:

30 July 2026 at 16:04:07

Source:

nvd.nist.gov

Click to open the original link from this advisory

Enterprise Applications, Web Technologies

A path traversal vulnerability has been identified in IBM App Connect Enterprise versions 13.0.1.0 through 13.0.7.2 and 12.0.1.0 through 12.0.12.27. The vulnerability allows a remote attacker to traverse directories on the affected system by sending specially crafted URL requests containing dot-dot sequences (/../). Successful exploitation enables an attacker to write arbitrary files on the system, which could lead to unauthorized file modification, code execution, or system compromise. The vulnerability is remotely exploitable without requiring physical access to the system. IBM has published a support advisory addressing the issue. Users of the affected versions are advised to apply patches or mitigations as provided by IBM. The vulnerability poses a high risk due to the potential for arbitrary file writes on enterprise integration systems.

Technical details

Mitigation steps:

Affected products:

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.27

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page