Vulnerability Description
IBM App Connect Operator versions CD 11.3.0 through 11.6.0 and 12.1.0 through 12.20.0, LTS versions 12.0.0 through 12.0.20, and IBM App Connect Enterprise Certified Containers Operands versions CD 12.0.11.2‑r1 through 12.0.12.5‑r1 and 13.0.1.0‑r1 through 13.0.6.1‑r1, and LTS versions 12.0.12‑r1 through 12.0.12‑r20, contain a vulnerability in which the IBM App Connect Enterprise Certified Container transmits data in clear text, potentially allowing an attacker to intercept and obtain sensitive information through man‑in‑the‑middle techniques.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | App Connect Enterprise Certified Containers Operands | 12.0.11.2 |
| Ibm | App Connect Operator | >= 11.3.0, <= 11.6.0 |
Related Weaknesses (CWE)
References
- https://www.ibm.com/support/pages/node/7262271Vendor Advisory
FAQ
What is CVE-2025-13490?
CVE-2025-13490 is a vulnerability with a CVSS score of 5.9 (MEDIUM). IBM App Connect Operator versions CD 11.3.0 through 11.6.0 and 12.1.0 through 12.20.0, LTS versions 12.0.0 through 12.0.20, and IBM App Connect Enterprise Certified Containers Operands versions CD 12....
How severe is CVE-2025-13490?
CVE-2025-13490 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-13490?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm App Connect Enterprise Certified Containers Operands, Ibm App Connect Operator.