Api Connect@5.0.0.0 Security Vulnerabilities and Issues — Api Connect@5.0.0.0 CVE List

Lucene search

IbmApi Connect5.0.0.0

12 matches found

CVE•added 2019/01/08 5:0 p.m.•143 views

CVE-2018-1932

IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the management server that could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 153175.

4.9CVSS4.7AI score0.06042EPSS

CVE•added 2019/06/25 4:15 p.m.•133 views

CVE-2019-4382

IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the system users using specially crafted HTTP requests. IBM X-Force ID: 162162.

5.3CVSS4.9AI score0.00338EPSS

CVE•added 2019/06/25 4:15 p.m.•129 views

CVE-2018-1858

IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 151256.

8.8CVSS8.4AI score0.00175EPSS

CVE•added 2019/10/29 12:15 a.m.•64 views

CVE-2019-4600

IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 167883.

5.3CVSS4.9AI score0.00152EPSS

CVE•added 2019/04/15 3:29 p.m.•63 views

CVE-2019-4203

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124.

9.8CVSS8.9AI score0.00483EPSS

CVE•added 2019/04/15 3:29 p.m.•59 views

CVE-2019-4202

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted request can run arbitrary code on the server and gain complete access to the system. IBM X-Force ID: 159123.

10CVSS9.4AI score0.02423EPSS

CVE•added 2019/05/29 3:29 p.m.•59 views

CVE-2019-4256

IBM API Connect 5.0.0.0 through 5.0.8.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 159944.

7.5CVSS7.2AI score0.00158EPSS

CVE•added 2019/05/22 3:29 p.m.•44 views

CVE-2018-1991

IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sensitive information that could provide critical information as to the underlying software stack in CMC UI headers. IBM X-Force ID: 154284.

4CVSS3.5AI score0.00141EPSS

CVE•added 2019/04/02 2:29 p.m.•40 views

CVE-2018-1874

IBM API Connect 5.0.0.0 through 5.0.8.5 could display highly sensitive information to an attacker with physical access to the system. IBM X-Force ID: 151636.

4.6CVSS4.2AI score0.00136EPSS

CVE•added 2019/01/29 4:29 p.m.•37 views

CVE-2018-1976

IBM API Connect 5.0.0.0 through 5.0.8.4 is impacted by sensitive information disclosure via a REST API that could allow a user with administrative privileges to obtain highly sensitive information. IBM X-Force ID: 154031.

4.9CVSS4.6AI score0.00261EPSS

CVE•added 2019/01/04 3:29 p.m.•36 views

CVE-2018-1859

IBM API Connect 5.0.0.0 through 5.0.8.4 could allow a user authenticated as an administrator with limited rights to escalate their privileges. IBM X-Force ID: 151258.

6.5CVSS4.6AI score0.00201EPSS

CVE•added 2019/08/20 7:15 p.m.•32 views

CVE-2019-4460

IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 163681.

7.5CVSS7.2AI score0.00375EPSS