Api Connect@5.0.7.1 Security Vulnerabilities and Issues — Api Connect@5.0.7.1 CVE List

Lucene search

IbmApi Connect5.0.7.1

5 matches found

CVE•added 2017/07/31 9:29 p.m.•43 views

CVE-2017-1386

IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques. IBM X-Force ID: 127160.

5.9CVSS5.5AI score0.00215EPSS

CVE•added 2017/09/25 4:29 p.m.•42 views

CVE-2017-1551

IBM API Connect 5.0.0.0 through 5.0.7.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...

6.1CVSS6.1AI score0.00159EPSS

CVE•added 2017/09/25 4:29 p.m.•42 views

CVE-2017-1555

IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed to the application plan. IBM X-Force ID: 131545.

4.3CVSS4.3AI score0.00215EPSS

CVE•added 2017/06/15 1:29 p.m.•40 views

CVE-2017-1379

IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by improper handling of requests to the Developer Portal. IBM X-Force ID: 127002.

7.5CVSS7.2AI score0.00312EPSS

CVE•added 2017/09/13 6:29 p.m.•40 views

CVE-2017-1556

IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that could allow an authenticated attacker to use a regex and cause the system to slow or hang. IBM X-Force ID: 131546.

6.5CVSS6.2AI score0.00465EPSS