Lucene search
+L

7 matches found

CNVD
CNVD
•added 2021/03/19 12:00 a.m.•17 views

Unspecified Vulnerability in IBM API Connect

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing, and securing APIs, microservices, and more. IBM API Connect suffers from a security vulnerability that allows an attacker to be able to use ...

6.4CVSS6.5AI score0.00714EPSS
SaveExploits0References1
OSV
OSV
•added 2021/03/15 4:15 p.m.•14 views

CVE-2021-20440

IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended recepient. An attacker who is a valid user in the user registry used by API Manager can use a stolen invitation link and register themselves as a member of an API provider...

4.3CVSS5.8AI score0.00714EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/03/15 3:30 p.m.•45 views

CVE-2021-20440

IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended recepient. An attacker who is a valid user in the user registry used by API Manager can use a stolen invitation link and register themselves as a member of an API provider...

6.4CVSS4.6AI score0.00714EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/03/15 12:00 a.m.•3 views

PT-2021-13967

Name of the Vulnerable Software and Affected Versions: IBM API Connect versions 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 Description: The issue allows an attacker who is a valid user in the user registry used by API Manager to register themselves as a member of an API provider organization...

6.4CVSS0.00714EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/15 12:00 a.m.•6 views

CVE-2021-20440: Undefined Security Weakness

IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended recepient. An attacker who is a valid user in the user registry used by API Manager can use a stolen invitation link and register themselves as a member of an API provider...

6.4CVSS5.8AI score0.00714EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/03/14 12:00 a.m.•8 views

CVE-2021-20440

IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended recepient. An attacker who is a valid user in the user registry used by API Manager can use a stolen invitation link and register themselves as a member of an API provider...

6.4CVSS6.2AI score0.00714EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2021/03/14 12:00 a.m.•14 views

IBM API Connect 安全漏洞

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing, and securing APIs, microservices, and more. IBM API Connect suffers from a security vulnerability that allows an attacker to be able to use ...

6.4CVSS5.6AI score0.00714EPSS
SaveExploits0References5
Rows per page
Query Builder