PT-2026-6556 · Ibm · Ibm App Connect Enterprise Certified Container

Published 2026-02-05 · Updated 2026-02-05 · CVE-2025-13491

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise Certified Container versions up to 12.19.0 (Continuous Delivery) IBM App Connect Enterprise Certified Container version 12.0 LTS (Long Term Support)

Description The software may allow an attacker to access sensitive files or modify configurations due to an untrusted search path.

Recommendations Update IBM App Connect Enterprise Certified Container to a version later than 12.19.0 (Continuous Delivery). Update IBM App Connect Enterprise Certified Container to a version later than 12.0 LTS (Long Term Support).

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2025-13491

Affected Products

Ibm App Connect Enterprise Certified Container

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-13491 · Security Note
• https://ibm.com/support/pages/node/7259746 · Patch, Vendor Advisory
• https://t.me/cveNotify/150983 · Telegram Post
• https://twitter.com/CVEnew/status/2019421057975746779 · Twitter Post