CVE-2025-36361

8.8 highEPSS 0.2%

High (8.8) in ibm app connect enterprise. EPSS 0.2% chance of exploitation in the next 30 days.

IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2025-10-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:app_connect_enterprise

References

https://www.ibm.com/support/pages/node/7249061

Check your stack JSON