Ibm Api Connect vulnerabilities

• ibm api connect IBM API Connect SQL Injection CVE-2026-9074 9.1 CriticalJuly 8, 2026
• ibm api connect IBM API Connect Default Credentials CVE-2026-3144 8.1 HighJuly 8, 2026
• ibm api connect Authentication bypass in IBM API Connect CVE-2025-13915 9.8 CriticalDecember 26, 2025
• ibm api connect IBM API Connect information disclosure CVE-2023-47722 6.2 MediumDecember 9, 2023
• ibm api connect IBM API Connect improper access control CVE-2023-28522 4.3 MediumMay 12, 2023
• ibm api connect IBM API Connect security bypass CVE-2022-34350 5.3 MediumFebruary 8, 2023
• ibm api connect IBM API Connect HOST header injection CVE-2021-38997 5.4 MediumDecember 1, 2022
• ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to... CVE-2021-29772 5.6 MediumAugust 26, 2021
• ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive... CVE-2021-29715 6.5 MediumAugust 26, 2021
• ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to HTTP header injection, caused by... CVE-2020-4706 5.4 MediumAugust 17, 2021
• ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.11 is vulnerable to cross-site scripting. This... CVE-2020-4707 5.4 MediumAugust 4, 2021
• ibm api connect IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member... CVE-2021-20440 6.4 MediumMarch 15, 2021
• ibm api connect IBM API Connect V10 and V2018 could allow an attacker who has intercepted a registration... CVE-2020-4903 4.8 MediumMarch 8, 2021
• ibm api connect IBM API Connect V10 is impacted by insecure communications during database replication. As the... CVE-2020-4695 5.9 MediumMarch 8, 2021
• ibm api connect IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to web... CVE-2020-4828 6.5 MediumFebruary 4, 2021
• ibm api connect IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to... CVE-2020-4827 4.3 MediumFebruary 4, 2021
• ibm api connect IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to... CVE-2020-4826 4.3 MediumFebruary 4, 2021
• ibm api connect IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to... CVE-2020-4825 5.4 MediumFebruary 4, 2021
• ibm api connect Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13... CVE-2020-4640 3.4 LowFebruary 4, 2021
• ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting. This... CVE-2020-4838 6.4 MediumJanuary 12, 2021
• ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow... CVE-2020-4899 7.4 HighJanuary 5, 2021
• ibm api connect IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege... CVE-2020-4638 7.2 HighSeptember 3, 2020
• ibm api connect IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks... CVE-2020-4337 6.5 MediumSeptember 3, 2020
• ibm api connect IBM API Connect V2018.4.1.0 through 2018.4.1.11 uses weaker than expected cryptographic... CVE-2020-4452 5.9 MediumJune 29, 2020
• ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.8 is vulnerable to cross-site scripting. This vulnerability... CVE-2020-4251 5.4 MediumJune 12, 2020
• ibm api connect IBM API Connect's V2018.4.1.0 through 2018.4.1.10 management server has an unsecured api which... CVE-2020-4346 5.3 MediumMay 12, 2020
• ibm api connect IBM API Connect V2018.4.1.0 through 2018.4.1.10 could allow a remote attacker to hijack the... CVE-2020-4195 5.4 MediumMay 12, 2020
• ibm api connect IBM API Connect V5.0.0.0 through 5.0.8.7iFix3 uses weaker than expected cryptographic algorithms... CVE-2019-4553 5.9 MediumMarch 24, 2020
• ibm api connect IBM API Connect 2018.4.1.7 uses weaker than expected cryptographic algorithms that could allow an... CVE-2019-4609 5.9 MediumDecember 18, 2019
• ibm api connect IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not... CVE-2019-4444 5.1 MediumDecember 16, 2019
• ibm api connect IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an... CVE-2019-4600 5.3 MediumOctober 28, 2019
• ibm api connect IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal... CVE-2019-4437 8.2 HighAugust 20, 2019
• ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to... CVE-2019-4460 4.3 MediumAugust 20, 2019
• ibm api connect IBM API Connect 2018.1 through 2018.4.1.6 developer portal could allow an unauthorized user to... CVE-2019-4402 8.6 HighAugust 20, 2019
• ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive... CVE-2019-4382 5.3 MediumJune 25, 2019
• ibm api connect IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized... CVE-2018-2013 5.3 MediumJune 25, 2019
• ibm api connect IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information... CVE-2018-2011 5.3 MediumJune 25, 2019
• ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could... CVE-2018-1858 4.3 MediumJune 25, 2019
• ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.6 uses weaker than expected cryptographic algorithms that... CVE-2019-4256 5.9 MediumMay 29, 2019
• ibm api connect IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sensitive information that could provide... CVE-2018-1991 2.7 LowMay 22, 2019
• ibm api connect IBM API Connect 2018.1 and 2018.4.1.4 could allow a remote attacker to hijack the clicking action... CVE-2018-2015 6.4 MediumMay 2, 2019
• ibm api connect IBM API Connect 2018.1 and 2018.4.1.2 uses weaker than expected cryptographic algorithms that... CVE-2018-2007 5.9 MediumApril 29, 2019
• ibm api connect IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to... CVE-2019-4203 8.9 HighApril 15, 2019
• ibm api connect IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An... CVE-2019-4202 10.0 CriticalApril 15, 2019
• ibm api connect IBM API Connect's Developer Portal 2018.1 and 2018.4.1.3 is impacted by a privilege escalation... CVE-2019-4155 8.8 HighApril 8, 2019
• ibm api connect Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like... CVE-2019-4051 5.3 MediumApril 8, 2019
• ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.5 could display highly sensitive information to an attacker... CVE-2018-1874 4.6 MediumApril 2, 2019
• ibm api connect IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover... CVE-2019-4052 8.2 HighMarch 22, 2019
• ibm api connect IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in... CVE-2018-2009 6.5 MediumMarch 11, 2019
• ibm api connect API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak. Authorization tokens in... CVE-2019-4008 9.0 CriticalFebruary 7, 2019
• Show olderLoading…