PT-2025-43607 · Ibm · Ibm App Connect Enterprise

Published 2025-10-24 · Updated 2025-10-28 · CVE-2025-36361

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise versions 12.0.1.0 through 12.0.12.17 IBM App Connect Enterprise versions 13.0.1.0 through 13.0.4.2

Description An authenticated user may be able to perform unauthorized actions on customer defined resources due to missing authorization checks.

Recommendations Update IBM App Connect Enterprise to a version later than 13.0.4.2. Update IBM App Connect Enterprise to a version later than 12.0.12.17.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-36361

Affected Products

Ibm App Connect Enterprise

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-36361 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36361 · Vendor Advisory
• https://twitter.com/CVEnew/status/1981659549816721712 · Twitter Post
• https://t.me/cveNotify/140144 · Telegram Post
• https://ibm.com/support/pages/node/7249061 · Patch, Vendor Advisory
• https://t.me/cveNotify/140673 · Telegram Post
• https://t.me/CVEtracker/35665 · Telegram Post
• https://t.me/cveNotify/140326 · Telegram Post