Lucene search
+L

EUVD-2020-26150

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 18 Views

IBM API Connect vulnerabilities allow attacker impersonation via intercepted invitation links

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins
Security Bulletin: IBM API Connect's provider org registration flow is vulnerable to impersonation and sensitive information leak. CVE-2020-4903)
6 Mar 202118:03
–ibm
attackerkb
attackerkb
CVE-2020-4903
6 Mar 202100:00
–attackerkb
cnnvd
CNNVD
IBM API Connect security vulnerabilities
6 Mar 202100:00
–cnnvd
cnvd
CNVD
IBM API Connect Information Disclosure Vulnerability (CNVD-2021-17208)
9 Mar 202100:00
–cnvd
cve
CVE
CVE-2020-4903
8 Mar 202118:00
–cve
cvelist
Cvelist
CVE-2020-4903
8 Mar 202118:00
–cvelist
nvd
NVD
CVE-2020-4903
8 Mar 202118:15
–nvd
osv_cve
osv_cve
CVE-2020-4903
8 Mar 202118:15
–osv_cve
prion
Prion
Design/Logic Flaw
8 Mar 202118:15
–prion
ptsecurity
Positive Technologies
PT-2021-12225
8 Mar 202100:00
–ptsecurity
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "28324b93-562d-3264-90bf-1107d45ca7d3",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "15f053d8-92a3-3daa-b549-8f83e848af87",
        "product": {
          "name": "API Connect"
        },
        "product_version": "10.0.1.1"
      },
      {
        "id": "4d14e9ce-35cd-388f-b5e1-9a81effbddc6",
        "product": {
          "name": "API Connect"
        },
        "product_version": "2018.4.1.13"
      },
      {
        "id": "9ab724aa-c4e4-3bf3-aae6-ec970ffdd71f",
        "product": {
          "name": "API Connect"
        },
        "product_version": "2018.4.1.0"
      },
      {
        "id": "cf0ceecc-5244-3520-8869-fa9e9c84492b",
        "product": {
          "name": "API Connect"
        },
        "product_version": "10.0.0.0"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 Oct 2025 00:30Current
6Medium risk
Vulners AI Score6
CVSS 34.8
CVSS 26.4
CVSS 3.16.5
EPSS0.00829
18