CVE Feed

    Dashboard / CVE / CVE-2025-13490

    CVE-2025-13490

    IBM App Connect Operator versions CD 11.3.0 through 11.6.0 and 12.1.0 through 12.20.0, LTS versions 12.0.0 through 12.0.20, and IBM App Connect Enterprise Certified Containers Operands versions CD 12.0.11.2‑r1 through 12.0.12.5‑r1 and 13.0.1.0‑r1 through 13.0.6.1‑r1, and LTS versions 12.0.12‑r1 through 12.0.12‑r20, contain a vulnerability in which the IBM App Connect Enterprise Certified Container transmits data in clear text, potentially allowing an attacker to intercept and obtain sensitive information through man‑in‑the‑middle techniques.

    Published:Mar 3, 2026
    Last Modified:Mar 4, 2026
    EPS:Mar 3, 2026
    EPSS Score:0.00028
    CVSS Score:5.9

    Affected Products

    Vendor
    Ibm
    Product
    App Connect Enterprise Certified Containers Operands
    Vendor
    Ibm
    Product
    App Connect Enterprisecertified Containers Operands
    Vendor
    Ibm
    Product
    App Connect Operator

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High