Integration Bus for z/OS vulnerabilities

2 known vulnerabilities in Integration Bus for z/OS from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  App Connect Enterprise: Loop with Unreachable Exit Condition

  CVE-2026-78543Sep 4, 2026IBM

  IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infinite loop.

• 7.7 High severity

  App Connect Enterprise: Improper Restriction of XML External Entity Reference

  CVE-2026-81832Sep 4, 2026IBM

  IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 SAP Adapter is vulnerable to an XML external entity (XXE) attack.