Advisories · Technology

IBM API Connect.

Every CVE that names IBM API Connect among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-9074 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

IBM API Connect SQL Injection
- IBM API Connect
- SQL injection
Not analysed yet 8 Jul 2026
CVE-2026-3144 CVE record

CVSS 8.1 High

IBM API Connect Default Credentials
- IBM API Connect
- CWE-1392
Not analysed yet 8 Jul 2026
CVE-2025-13915 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Authentication bypass in IBM API Connect
- IBM API Connect
- CWE-305
Not analysed yet 26 Dec 2025
CVE-2023-47722 CVE record

CVSS 6.2 Medium

IBM API Connect information disclosure
- IBM API Connect
Not analysed yet 9 Dec 2023
CVE-2023-28522 CVE record

CVSS 4.3 Medium

IBM API Connect improper access control
- IBM API Connect
Not analysed yet 12 May 2023
CVE-2022-34350 CVE record

CVSS 5.3 Medium

IBM API Connect security bypass
- IBM API Connect
Not analysed yet 8 Feb 2023
CVE-2021-38997 CVE record

CVSS 5.4 Medium

IBM API Connect HOST header injection
- IBM API Connect
- CWE-644
Not analysed yet 1 Dec 2022
CVE-2021-29772 CVE record

CVSS 5.6 Medium

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code…
- IBM API Connect
Not analysed yet 26 Aug 2021
CVE-2021-29715 CVE record

CVSS 6.5 Medium

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive…
- IBM API Connect
Not analysed yet 26 Aug 2021
CVE-2020-4706 CVE record

CVSS 5.4 Medium

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to HTTP header injection…
- IBM API Connect
Not analysed yet 17 Aug 2021
CVE-2020-4707 CVE record

CVSS 5.4 Medium

IBM API Connect 5.0.0.0 through 5.0.8.11 is vulnerable to cross-site scripting.
- IBM API Connect
Not analysed yet 4 Aug 2021
CVE-2021-20440 CVE record

CVSS 6.4 Medium

IBM API Connect: IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member…
- IBM API Connect
Not analysed yet 15 Mar 2021
CVE-2020-4903 CVE record

CVSS 4.8 Medium

IBM API Connect: IBM API Connect V10 and V2018 could allow an attacker who has intercepted a registration…
- IBM API Connect
Not analysed yet 8 Mar 2021
CVE-2020-4695 CVE record

CVSS 5.9 Medium

IBM API Connect V10 is impacted by insecure communications during database replication.
- IBM API Connect
Not analysed yet 8 Mar 2021
CVE-2020-4828 CVE record

CVSS 6.5 Medium

IBM API Connect: IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is…
- IBM API Connect
Not analysed yet 4 Feb 2021
CVE-2020-4827 CVE record

CVSS 4.3 Medium

IBM API Connect: IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is…
- IBM API Connect
Not analysed yet 4 Feb 2021
CVE-2020-4826 CVE record

CVSS 4.3 Medium

IBM API Connect: IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is…
- IBM API Connect
Not analysed yet 4 Feb 2021
CVE-2020-4825 CVE record

CVSS 5.4 Medium

IBM API Connect: IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is…
- IBM API Connect
Not analysed yet 4 Feb 2021
CVE-2020-4640 CVE record

CVSS 3.4 Low

IBM API Connect: Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13…
- IBM API Connect
Not analysed yet 4 Feb 2021
CVE-2020-4838 CVE record

CVSS 6.4 Medium

IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting.
- IBM API Connect
Not analysed yet 12 Jan 2021
CVE-2020-4899 CVE record

CVSS 7.4 High

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or…
- IBM API Connect
Not analysed yet 5 Jan 2021
CVE-2020-4638 CVE record

CVSS 7.2 High

IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation.
- IBM API Connect
Not analysed yet 3 Sept 2020
CVE-2020-4337 CVE record

CVSS 6.5 Medium

IBM API Connect: IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing…
- IBM API Connect
Not analysed yet 3 Sept 2020
CVE-2020-4452 CVE record

CVSS 5.9 Medium

IBM API Connect: IBM API Connect V2018.4.1.0 through 2018.4.1.11 uses weaker than expected cryptographic…
- IBM API Connect
Not analysed yet 29 Jun 2020
CVE-2020-4251 CVE record

CVSS 5.4 Medium

IBM API Connect 5.0.0.0 through 5.0.8.8 is vulnerable to cross-site scripting.
- IBM API Connect
Not analysed yet 12 Jun 2020
CVE-2020-4346 CVE record

CVSS 5.3 Medium

IBM API Connect: IBM API Connect's V2018.4.1.0 through 2018.4.1.10 management server has an unsecured api…
- IBM API Connect
Not analysed yet 12 May 2020
CVE-2020-4195 CVE record

CVSS 5.4 Medium

IBM API Connect: IBM API Connect V2018.4.1.0 through 2018.4.1.10 could allow a remote attacker to hijack…
- IBM API Connect
Not analysed yet 12 May 2020
CVE-2019-4553 CVE record

CVSS 5.9 Medium

IBM API Connect: IBM API Connect V5.0.0.0 through 5.0.8.7iFix3 uses weaker than expected cryptographic…
- IBM API Connect
Not analysed yet 24 Mar 2020
CVE-2019-4609 CVE record

CVSS 5.9 Medium

IBM API Connect: IBM API Connect 2018.4.1.7 uses weaker than expected cryptographic algorithms that could…
- IBM API Connect
Not analysed yet 18 Dec 2019
CVE-2019-4444 CVE record

CVSS 5.1 Medium

IBM API Connect: IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does…
- IBM API Connect
Not analysed yet 16 Dec 2019
CVE-2019-4600 CVE record

CVSS 5.3 Medium

IBM API Connect: IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an…
- IBM API Connect
Not analysed yet 28 Oct 2019
CVE-2019-4437 CVE record

CVSS 8.2 High

IBM API Connect: IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about…
- IBM API Connect
Not analysed yet 20 Aug 2019
CVE-2019-4460 CVE record

CVSS 4.3 Medium

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to…
- IBM API Connect
Not analysed yet 20 Aug 2019
CVE-2019-4402 CVE record

CVSS 8.6 High

IBM API Connect: IBM API Connect 2018.1 through 2018.4.1.6 developer portal could allow an unauthorized…
- IBM API Connect
Not analysed yet 20 Aug 2019
CVE-2019-4382 CVE record

CVSS 5.3 Medium

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain…
- IBM API Connect
Not analysed yet 25 Jun 2019
CVE-2018-2013 CVE record

CVSS 5.3 Medium

IBM API Connect: IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an…
- IBM API Connect
Not analysed yet 25 Jun 2019
CVE-2018-2011 CVE record

CVSS 5.3 Medium

IBM API Connect: IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive…
- IBM API Connect
Not analysed yet 25 Jun 2019
CVE-2018-1858 CVE record

CVSS 4.3 Medium

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which…
- IBM API Connect
Not analysed yet 25 Jun 2019
CVE-2019-4256 CVE record

CVSS 5.9 Medium

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.6 uses weaker than expected cryptographic…
- IBM API Connect
Not analysed yet 29 May 2019
CVE-2018-1991 CVE record

CVSS 2.7 Low

IBM API Connect: IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sensitive information that could…
- IBM API Connect
Not analysed yet 22 May 2019
CVE-2018-2015 CVE record

CVSS 6.4 Medium

IBM API Connect: IBM API Connect 2018.1 and 2018.4.1.4 could allow a remote attacker to hijack the…
- IBM API Connect
Not analysed yet 2 May 2019
CVE-2018-2007 CVE record

CVSS 5.9 Medium

IBM API Connect: IBM API Connect 2018.1 and 2018.4.1.2 uses weaker than expected cryptographic algorithms…
- IBM API Connect
Not analysed yet 29 Apr 2019
CVE-2019-4203 CVE record

CVSS 8.9 High

IBM API Connect: IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers…
- IBM API Connect
Not analysed yet 15 Apr 2019
CVE-2019-4202 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection.
- IBM API Connect
Not analysed yet 15 Apr 2019
CVE-2019-4155 CVE record

CVSS 8.8 High

IBM API Connect: IBM API Connect's Developer Portal 2018.1 and 2018.4.1.3 is impacted by a privilege…
- IBM API Connect
Not analysed yet 8 Apr 2019
CVE-2019-4051 CVE record

CVSS 5.3 Medium

IBM API Connect: Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification…
- IBM API Connect
Not analysed yet 8 Apr 2019
CVE-2018-1874 CVE record

CVSS 4.6 Medium

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.5 could display highly sensitive information to an…
- IBM API Connect
Not analysed yet 2 Apr 2019
CVE-2019-4052 CVE record

CVSS 8.2 High

IBM API Connect: IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to…
- IBM API Connect
Not analysed yet 22 Mar 2019
CVE-2018-2009 CVE record

CVSS 6.5 Medium

IBM API Connect: IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure…
- IBM API Connect
Not analysed yet 11 Mar 2019
CVE-2019-4008 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak.
- IBM API Connect
Not analysed yet 7 Feb 2019
CVE-2018-1976 CVE record

CVSS 4.9 Medium

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.4 is impacted by sensitive information disclosure…
- IBM API Connect
Not analysed yet 29 Jan 2019
CVE-2018-1932 CVE record

CVSS 4.9 Medium

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based…
- IBM API Connect
Not analysed yet 8 Jan 2019
CVE-2018-1859 CVE record

CVSS 4.3 Medium

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.4 could allow a user authenticated as an…
- IBM API Connect
Not analysed yet 4 Jan 2019
CVE-2018-1973 CVE record

CVSS 7.2 High

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.4 allows a user with limited 'API Administrator…
- IBM API Connect
Not analysed yet 20 Dec 2018
CVE-2018-1784 CVE record

CVSS 7.1 High

IBM API Connect: IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector…
- IBM API Connect
Not analysed yet 20 Dec 2018
CVE-2018-1778 CVE record

CVSS 7.7 High

IBM API Connect: IBM LoopBack (IBM API Connect 2018.1, 2018.4.1, 5.0.8.0…
- IBM API Connect
Not analysed yet 20 Dec 2018
CVE-2018-1779 CVE record

CVSS 7.5 High

IBM API Connect: IBM API Connect 2018.1 through 2018.3.7 could allow an unauthenticated attacker to cause…
- IBM API Connect
Not analysed yet 20 Nov 2018
CVE-2018-1774 CVE record

CVSS 8.9 High

IBM API Connect: IBM API Connect 5.0.0.0, 5.0.8.4, 2018.1 and 2018.3.6 is vulnerable to CSV injection via…
- IBM API Connect
Not analysed yet 9 Nov 2018
CVE-2018-1789 CVE record

CVSS 8.4 High

IBM API Connect: IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially…
- IBM API Connect
Not analysed yet 7 Sept 2018
CVE-2018-1599 CVE record

CVSS 5.4 Medium

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to hijack the…
- IBM API Connect
Not analysed yet 22 Aug 2018