8.6CVSS
8.8AI Score
0.002EPSS
HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register...
6.1CVSS
6.6AI Score
0.001EPSS
The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and private APIs, which allows remote authenticated users to obtain sensitive information or modify data via unspecified API...
5.7AI Score
0.001EPSS
IBM API Management 3.0 before 3.0.4.0 IF1 allows remote attackers to obtain sensitive analytics information in an encrypted form via unspecified...
6.7AI Score
0.003EPSS
IBM API Management 3.x before 3.0.1.0 allows local users to obtain sensitive ciphertext information via unspecified...
6.3AI Score
0.0004EPSS
Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown...
7.3AI Score
0.003EPSS
Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via unknown...
6.2AI Score
0.003EPSS