IBM API Connect Code Injection Vulnerability

IBM API Connect is a comprehensive end-to-end API lifecycle solution. a code injection vulnerability exists in IBM API Connect versions 5.0.0.0 - 5.0.8.11. The vulnerability stems from unvalidated user input. An attacker could exploit the vulnerability to inject code...

IBM API Connect 安全漏洞

IBM API Connect is a comprehensive end-to-end API lifecycle solution. An information disclosure and denial of service vulnerability exists in IBM API Connect versions 5.0.0.0 - 5.0.8.11. The vulnerability originates from an open port. A remote user can exploit the vulnerability to obtain sensitiv...

Security Bulletin: IBM API Connect is impacted by reflected cross site scripting (CVE-2020-4707)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-4707 DESCRIPTION: IBM API Connect is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionali...