Api Connect Security Vulnerabilities and Issues — Api Connect CVE List

Lucene search

IbmApi Connect

3 matches found

CVE•added 2021/03/15 4:15 p.m.•42 views

CVE-2021-20440

IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended recepient. An attacker who is a valid user in the user registry used by API Manager can use a stolen invitation link and register themselves as a member of an API provider organization...

6.4CVSS4.3AI score0.0018EPSS

CVE•added 2021/03/08 6:15 p.m.•32 views

CVE-2020-4695

IBM API Connect V10 is impacted by insecure communications during database replication. As the data replication happens over insecure communication channels, an attacker can view unencrypted data leading to a loss of confidentiality.

7.5CVSS7.3AI score0.00096EPSS

CVE•added 2021/03/08 6:15 p.m.•32 views

CVE-2020-4903

IBM API Connect V10 and V2018 could allow an attacker who has intercepted a registration invitation link to impersonate the registered user or obtain sensitive information. IBM X-Force ID: 191105.

6.5CVSS6.2AI score0.00136EPSS