IBM App Connect Operator versions CD 11.3.0 through 11.6.0 and 12.1.0 through 12.20.0, LTS versions 12.0.0 through 12.0.20, and IBM App Connect Enterprise Certified Containers Operands versions CD 12.0.11.2‑r1 through 12.0.12.5‑r1 and 13.0.1.0‑r1 through 13.0.6.1‑r1, and LTS versions 12.0.12‑r1 through 12.0.12‑r20, contain a vulnerability in which the IBM App Connect Enterprise Certified Container transmits data in clear text, potentially allowing an attacker to intercept and obtain sensitive information through man‑in‑the‑middle techniques.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7262271 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Jun 2026, 08:34
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
04 Mar 2026, 18:37
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ibm app Connect Enterprise Certified Containers Operands
Ibm Ibm app Connect Operator |
|
| References | () https://www.ibm.com/support/pages/node/7262271 - Vendor Advisory | |
| CWE | CWE-319 | |
| CPE | cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.2.1:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r1:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.1.0:r2:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r4:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.11.2:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.2.0:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r20:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r19:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r2:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r8:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r17:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.3.1:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.4.1:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_operator:*:*:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.3.0:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r14:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r5:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r9:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.4.2:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.4.0:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r6:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.4:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r13:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r12:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.5.0:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.5.1:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.0:r2:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_operator:*:*:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.1.1:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r15:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r3:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.2:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.1.0:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.11.3:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.5.2:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.3:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r10:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r11:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.6.1:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.2.2:r2:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.5:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r16:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r7:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.6.0:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r18:*:*:lts:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.0:r1:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.2.2:r1:*:*:continuous_delivery:*:*:* |
03 Mar 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-03 20:16
Updated : 2026-06-17 08:34
NVD link : CVE-2025-13490
Mitre link : CVE-2025-13490
CVE.ORG link : CVE-2025-13490
JSON object : View
Products Affected
ibm
- app_connect_operator
- app_connect_enterprise_certified_containers_operands
CWE
CWE-319
Cleartext Transmission of Sensitive Information