Unrated severityNVD Advisory· Published Jun 30, 2026· Updated Jul 20, 2026
IBM App Connect Enterprise and IBM Integration Bus for z/OS toolkit is vulnerable to an sql injection
CVE-2026-3602
Description
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creating files they may not be aware of.
Affected products
2- Range: 10.1.0.0 - 10.1.0.7
- Range: 13.0.1.0 - 13.0.7.2, 12.0.1.0 - 12.0.12.26
Patches
Vulnerability mechanics
References
1- www.ibm.com/support/pages/node/7278350mitrevendor-advisorypatch
News mentions
0No linked articles in our index yet.