604 matches found
Security Bulletin: Vulnerability in Apache Log4j affects IBM API Connect (APIC) (CVE-2021-44228)
Summary IBM API Connect APIC has addressed the Apache Log4j vulnerability CVE-2021-44228 by updating to Apache Log4j v2.15.0 and removing the vulnerable JndiLookup class in the affected analytics and management V5 only server components. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION:...
Security Bulletin: IBM API Connect is impacted by a vulnerabilities in Node.js (CVE-2021-22884, CVE-2021-22883)
Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2021-22884 DESCRIPTION: Node.js is vulnerable to a denial of service, caused by an error when the allowlist includes "localhost6". By controlling the victim's DNS server or spoofing its responses, ...
Security Bulletin: IBM API Connect is impacted by a vulnerability in Drupal core (CVE-2021-32610)
Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2021-32610 DESCRIPTION: Drupal Core could allow a remote attacker to execute arbitrary code on the system, caused by the use of the third-party PEAR ArchiveTar library. By persuading a victim to...
Security Bulletin: IBM API Connect is impacted by a vulnerability in PostgreSQL (CVE-2021-32029)
Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2021-32029 DESCRIPTION: PostgreSQL could allow a remote authenticated attacker to obtain sensitive information, caused by an error when using an UPDATE…RETURNING command on a purpose-crafted table...
Security Bulletin: IBM API Connect is impacted by multiple vulnerabilities in IBM Http server
Summary IBM API Connect has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2017-7679 DESCRIPTION: Apache HTTPD could allow a remote attacker to obtain sensitive information, caused by a buffer overread in modmime. By sending a specially crafted Content-Type response...
IBM API Connect Code Injection Vulnerability
IBM API Connect is a comprehensive end-to-end API lifecycle solution. a code injection vulnerability exists in IBM API Connect versions 5.0.0.0 - 5.0.8.11. The vulnerability stems from unvalidated user input. An attacker could exploit the vulnerability to inject code...
CVE-2021-29772
IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input. IBM X-Force ID: 202774...
PT-2021-18428
Name of the Vulnerable Software and Affected Versions IBM API Connect versions 5.0.0.0 through 5.0.8.11 Description The issue allows a remote user to obtain sensitive information or conduct denial of service attacks due to open ports. Recommendations For versions 5.0.0.0 through 5.0.8.11, conside...
CVE-2021-29772: Improper Control of Generation of Code
IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input. IBM X-Force ID: 202774...
CVE-2021-29715: Undefined Security Weakness
IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive information or conduct denial of serivce attacks due to open ports. IBM X-Force ID: 201018...
PT-2021-18469
Name of the Vulnerable Software and Affected Versions IBM API Connect versions 5.0.0.0 through 5.0.8.11 Description The issue allows a user to potentially inject code due to unsanitized user input. Recommendations For versions 5.0.0.0 through 5.0.8.11, consider implementing input validation and...
Security Bulletin: IBM API Connect is impacted by a vulnerability in Drupal (201714)
Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details Third Party Entry: 201714 DESCRIPTION: Gutenberg module for Drupal could allow a remote attacker to bypass security restrictions, caused by improper validation of access rules in certain situations. By sendin...
Security Bulletin: IBM API Connect is impacted by multiple vulnerabilities in Oracle MySQL
Summary IBM API Connect has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2020-14845 DESCRIPTION: An unspecified vulnerability in Oracle MySQL Server related to the Optimizer component could allow an authenticated attacker to cause a denial of service resulting in a hi...
Security Bulletin: IBM API Connect is impacted by a vulnerability in Drupal CKEditor (CVE-2020-27193)
Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-27193 DESCRIPTION: CKSource CKEditor is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the Color Button dialog. A remote attacker could exploit thi...
Security Bulletin: IBM API Connect is impacted by multiple vulnerabilities in Drupal dated modernizr library
Summary IBM API Connect has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2021-23337 DESCRIPTION: Node.js lodash module could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by a command injection flaw in the template. By sendi...
Security Bulletin: IBM API Connect is impacted by a vulnerability in Golang (CVE-2020-24553)
Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-24553 DESCRIPTION: Golang Go is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the CGI/FCGI handlers. A remote attacker could exploit this...
Security Bulletin: IBM API Connect V5 is impacted by a vulnerability in nginx. (CVE-2021-23017)
Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2021-23017 DESCRIPTION: NGINX could allow a remote attacker to execute arbitrary code on the system, caused by an off-by-one error in ngxresolvercopy while processing DNS responses. By sending a...
Security Bulletin: API Connect V5 is potentially vulnerable to code injection (CVE-2021-29772)
Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2021-29772 DESCRIPTION: IBM API Connect could allow a user to potentially inject code due to unsanitized user input. CVSS Base score: 5.6 CVSS Temporal Score: See:...
Security Bulletin: IBM API Connect is impacted by vulnerability CVE-2021-29715.
Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2021-29715 DESCRIPTION: IBM API Connect could alllow a remote user to obtain sensitive information or conduct denial of serivce attacks due to open ports. CVSS Base score: 6.5 CVSS Temporal Score:...
