CVE-2025-36361CWE-862

IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA

Medium · published October 24, 2025

CVSS v3.1
6.3
EPSS
0%
Percentile
11.8
In the wild
Unconfirmed
What it is

IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.8th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-10-24T09:35Z
EPSS history
Timeline
  • 24 OCT 09:35Z
    IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA
    cvelistv5