Api Connect Security Vulnerabilities and Issues — Api Connect CVE List

Lucene search

IbmApi Connect

4 matches found

cve•added 2019/06/25 4:15 p.m.•136 views

CVE-2018-2011

IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially crafted HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 155150.

5.3CVSS4.8AI score0.00546EPSS

cve•added 2019/06/25 4:15 p.m.•133 views

CVE-2019-4382

IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the system users using specially crafted HTTP requests. IBM X-Force ID: 162162.

5.3CVSS4.9AI score0.00338EPSS

cve•added 2019/06/25 4:15 p.m.•129 views

CVE-2018-1858

IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 151256.

8.8CVSS8.4AI score0.00175EPSS

cve•added 2019/06/25 4:15 p.m.•103 views

CVE-2018-2013

IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid in further attacks against the system. IBM X-Force ID: 155193.

5.3CVSS4.8AI score0.00235EPSS