CVE-2026-12947CWE-532

CVE-2026-12947

High · published July 30, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
32.5
In the wild
Unconfirmed
What it is

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive information in log files that could be read by a local user.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00395 · 32.5th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2026-07-30T19:16Z
Affected products (2)
ProductVersionsFixed in
ibm/app_connect_enterprise≥ 12.0.1.0, < 12.0.12.2812.0.12.28
ibm/app_connect_enterprise≥ 13.0.1.0, < 13.0.8.013.0.8.0
References (1)
https://www.ibm.com/support/pages/node/7280894 · [email protected]
EPSS history
Timeline
  • 30 JUL 14:17Z
    IBM App Connect Enterprise is vulnerable to Confidentiality disclosure on Discovery Connector nodes
    cvelistv5