Advisories · Technology

IBM API Connect.

Every CVE that names IBM API Connect among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2018-1712 CVE record

CVSS 8.6 High

IBM API Connect: IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side…
- IBM API Connect
Not analysed yet 16 Aug 2018
CVE-2018-1638 CVE record

CVSS 5.9 Medium

IBM API Connect: IBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor…
- IBM API Connect
Not analysed yet 31 Jul 2018
CVE-2018-1548 CVE record

CVSS 4.3 Medium

IBM API Connect: IBM API Connect 2018.1.0.0, 2018.2.1, 2018.2.2, 2018.2.3…
- IBM API Connect
Not analysed yet 9 Jul 2018
CVE-2018-1546 CVE record

CVSS 5.9 Medium

IBM API Connect information disclosure
- IBM API Connect
Not analysed yet 6 Jul 2018
CVE-2018-1532 CVE record

CVSS 4.3 Medium

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each…
- IBM API Connect
Not analysed yet 31 May 2018
CVE-2018-1468 CVE record

IBM API Connect: IBM API Connect 5.0.8.1 and 5.0.8.2 could allow a user to get access to internal…
- IBM API Connect
Not analysed yet 2 May 2018
CVE-2018-1430 CVE record

IBM API Connect 5.0.0.0 through 5.0.8.2 is vulnerable to cross-site scripting.
- IBM API Connect
Not analysed yet 30 Apr 2018
CVE-2018-1389 CVE record

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.8.2 is impacted by generated LoopBack APIs for a…
- IBM API Connect
Not analysed yet 30 Apr 2018
CVE-2018-1469 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

IBM API Connect: IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated…
- IBM API Connect
Not analysed yet 4 Apr 2018
CVE-2018-1382 CVE record

IBM API Connect 5.0.0.0 is vulnerable to cross-site scripting.
- IBM API Connect
Not analysed yet 7 Feb 2018
CVE-2017-1785 CVE record

IBM API Connect: IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query…
- IBM API Connect
Not analysed yet 7 Feb 2018
CVE-2017-1555 CVE record

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an…
- IBM API Connect
Not analysed yet 25 Sept 2017
CVE-2017-1551 CVE record

IBM API Connect: IBM API Connect 5.0.0.0 through 5.0.7.2 could allow a remote attacker to hijack the…
- IBM API Connect
Not analysed yet 25 Sept 2017
CVE-2017-1556 CVE record

IBM API Connect: IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that…
- IBM API Connect
Not analysed yet 13 Sept 2017
CVE-2017-1386 CVE record

IBM API Connect: IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create…
- IBM API Connect
Not analysed yet 31 Jul 2017
CVE-2017-1328 CVE record

IBM API Connect: IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security…
- IBM API Connect
Not analysed yet 27 Jun 2017
CVE-2017-1322 CVE record

IBM API Connect: IBM API Connect 5.0.6.0 is vulnerable to an XML External Entity Injection (XXE) attack…
- IBM API Connect
Not analysed yet 27 Jun 2017
CVE-2017-1379 CVE record

IBM API Connect: IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information…
- IBM API Connect
Not analysed yet 15 Jun 2017