# IBM API Connect. Every CVE that names IBM API Connect among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [IBM API Connect: IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side…](https://agentprime.io/advisories/CVE-2018-1712.md) `CVE-2018-1712` · CVE record: IBM API Connect · CVSS 8.6 High · Not analysed yet · Published 16 Aug 2018 - [IBM API Connect: IBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor…](https://agentprime.io/advisories/CVE-2018-1638.md) `CVE-2018-1638` · CVE record: IBM API Connect · CVSS 5.9 Medium · Not analysed yet · Published 31 Jul 2018 - [IBM API Connect: IBM API Connect 2018.1.0.0, 2018.2.1, 2018.2.2, 2018.2.3…](https://agentprime.io/advisories/CVE-2018-1548.md) `CVE-2018-1548` · CVE record: IBM API Connect · CVSS 4.3 Medium · Not analysed yet · Published 9 Jul 2018 - [IBM API Connect information disclosure](https://agentprime.io/advisories/CVE-2018-1546.md) `CVE-2018-1546` · CVE record: IBM API Connect · CVSS 5.9 Medium · Not analysed yet · Published 6 Jul 2018 - [IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each…](https://agentprime.io/advisories/CVE-2018-1532.md) `CVE-2018-1532` · CVE record: IBM API Connect · CVSS 4.3 Medium · Not analysed yet · Published 31 May 2018 - [IBM API Connect: IBM API Connect 5.0.8.1 and 5.0.8.2 could allow a user to get access to internal…](https://agentprime.io/advisories/CVE-2018-1468.md) `CVE-2018-1468` · CVE record: IBM API Connect · No CVSS score · Not analysed yet · Published 2 May 2018 - [IBM API Connect 5.0.0.0 through 5.0.8.2 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1430.md) `CVE-2018-1430` · CVE record: IBM API Connect · No CVSS score · Not analysed yet · Published 30 Apr 2018 - [IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.2 is impacted by generated LoopBack APIs for a…](https://agentprime.io/advisories/CVE-2018-1389.md) `CVE-2018-1389` · CVE record: IBM API Connect · No CVSS score · Not analysed yet · Published 30 Apr 2018 - [IBM API Connect: IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated…](https://agentprime.io/advisories/CVE-2018-1469.md) `CVE-2018-1469` · CVE record: IBM API Connect · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Apr 2018 - [IBM API Connect 5.0.0.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1382.md) `CVE-2018-1382` · CVE record: IBM API Connect · No CVSS score · Not analysed yet · Published 7 Feb 2018 - [IBM API Connect: IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query…](https://agentprime.io/advisories/CVE-2017-1785.md) `CVE-2017-1785` · CVE record: IBM API Connect · No CVSS score · Not analysed yet · Published 7 Feb 2018 - [IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an…](https://agentprime.io/advisories/CVE-2017-1555.md) `CVE-2017-1555` · CVE record: IBM API Connect · No CVSS score · Not analysed yet · Published 25 Sept 2017 - [IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.7.2 could allow a remote attacker to hijack the…](https://agentprime.io/advisories/CVE-2017-1551.md) `CVE-2017-1551` · CVE record: IBM API Connect · No CVSS score · Not analysed yet · Published 25 Sept 2017 - [IBM API Connect: IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that…](https://agentprime.io/advisories/CVE-2017-1556.md) `CVE-2017-1556` · CVE record: IBM API Connect · No CVSS score · Not analysed yet · Published 13 Sept 2017 - [IBM API Connect: IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create…](https://agentprime.io/advisories/CVE-2017-1386.md) `CVE-2017-1386` · CVE record: IBM API Connect · No CVSS score · Not analysed yet · Published 31 Jul 2017 - [IBM API Connect: IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security…](https://agentprime.io/advisories/CVE-2017-1328.md) `CVE-2017-1328` · CVE record: IBM API Connect · No CVSS score · Not analysed yet · Published 27 Jun 2017 - [IBM API Connect: IBM API Connect 5.0.6.0 is vulnerable to an XML External Entity Injection (XXE) attack…](https://agentprime.io/advisories/CVE-2017-1322.md) `CVE-2017-1322` · CVE record: IBM API Connect · No CVSS score · Not analysed yet · Published 27 Jun 2017 - [IBM API Connect: IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information…](https://agentprime.io/advisories/CVE-2017-1379.md) `CVE-2017-1379` · CVE record: IBM API Connect · No CVSS score · Not analysed yet · Published 15 Jun 2017 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .