CVE-2025-13490

IBM App Connect Operator versions CD 11.3.0 through 11.6.0 and 12.1.0 through 12.20.0, LTS versions 12.0.0 through 12.0.20, and IBM App Connect Enterprise Certified Containers Operands versions CD 12.0.11.2‑r1 through 12.0.12.5‑r1 and 13.0.1.0‑r1 through 13.0.6.1‑r1, and LTS versions 12.0.12‑r1 through 12.0.12‑r20, contain a vulnerability in which the IBM App Connect Enterprise Certified Container transmits data in clear text, potentially allowing an attacker to intercept and obtain sensitive information through man‑in‑the‑middle techniques.

CVSS v3 5.9 MEDIUM

5.9^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7262271	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.11.2:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.11.3:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r1:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r10:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r11:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r12:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r13:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r14:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r15:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r16:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r17:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r18:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r19:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r2:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r20:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r3:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r4:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r5:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r6:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r7:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r8:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r9:::lts:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.0:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.0:r2:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.2:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.3:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.4:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.5:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.1.0:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.1.0:r2:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.1.1:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.2.0:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.2.1:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.2.2:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.2.2:r2:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.3.0:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.3.1:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.4.0:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.4.1:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.4.2:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.5.0:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.5.1:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.5.2:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.6.0:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.6.1:r1:::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_operator:::::continuous_delivery:::*
	cpe:2.3:a:ibm:app_connect_operator:::::lts:::*
	cpe:2.3:a:ibm:app_connect_operator:::::continuous_delivery:::*

History

No history.

Information

Published : 2026-03-03 20:16

Updated : 2026-03-04 22:16

NVD link : CVE-2025-13490

Mitre link : CVE-2025-13490

CVE.ORG link : CVE-2025-13490

JSON object : View

Products Affected

ibm

app_connect_enterprise_certified_containers_operands
app_connect_operator

CWE

CWE-319

Cleartext Transmission of Sensitive Information

5.9 /10