CVSS 5.4 (medium) · published 2026-11-08
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to inject arbitrary HTML due to improper output neutralization.
Affected products (NVD): ibm app_connect_enterprise
Fixed in (NVD): 12.0.12.31, 13.0.9.0
Weakness: CWE-79
Source: NVD CVE-2026-18196
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.