Filters

IBM API ConnectIBM API Connect could alllow a remote user to obtain sensitive information or conduct denial of seri…

critical
9.1
First published (updated )
CVE-2021-29715

IBM API ConnectCode Injection

critical
9.8
First published (updated )
CVE-2021-29772

IBM API ConnectXSS

medium
5.5
First published (updated )
CVE-2020-4706

IBM API ConnectXSS

medium
5.4
First published (updated )
CVE-2020-4707

IBM API ConnectXSS

medium
6.4
First published (updated )
CVE-2020-4838

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

IBM API ConnectIBM API Connect could potentially leak sensitive information or allow for data corruption due to pla…

critical
9.1
First published (updated )
CVE-2020-4899

IBM API ConnectXSS

medium
5.4
First published (updated )
CVE-2020-4251

IBM API ConnectIBM API Connect uses weaker than expected cryptographic algorithms that could allow an attacker to d…

high
7.5
First published (updated )
CVE-2019-4553

IBM API ConnectIBM API Connect could reveal sensitive information to an attacker using a specially crafted HTTP req…

medium
5.3
First published (updated )
CVE-2019-4600

IBM API ConnectPath Traversal

high
7.5
First published (updated )
CVE-2019-4460

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

IBM API ConnectIBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive informa…

medium
5.3
First published (updated )
CVE-2019-4382

IBM API ConnectCSRF

high
8.8
First published (updated )
CVE-2018-1858

IBM API ConnectWeak Encryption

high
7.5
First published (updated )
CVE-2019-4256

IBM API ConnectInfoleak

medium
4
First published (updated )
CVE-2018-1991

IBM API ConnectOS Command Injection, Command Injection

critical
10
First published (updated )
CVE-2019-4202

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

IBM API ConnectSSRF

critical
9.8
First published (updated )
CVE-2019-4203

IBM API ConnectInfoleak

medium
4.6
First published (updated )
CVE-2018-1874

IBM API ConnectInfoleak

medium
4.9
First published (updated )
CVE-2018-1976

IBM API ConnectIBM API Connect 5.0.0.0 through 5.0.8.4 could allow a user authenticated as an administrator with li…

medium
6.5
First published (updated )
CVE-2018-1859

IBM API ConnectInfoleak

medium
4.9
First published (updated )
CVE-2018-1932

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

IBM API ConnectIBM API Connect 5.0.0.0 through 5.0.8.4 allows a user with limited 'API Administrator level access t…

critical
9
First published (updated )
CVE-2018-1973

IBM API ConnectSQL Injection

critical
9.8
First published (updated )
CVE-2018-1784

IBM API ConnectIBM API Connect 5.0.0.0, 5.0.8.4, 2018.1 and 2018.3.6 is vulnerable to CSV injection via the develop…

high
8.9
First published (updated )
CVE-2018-1774

IBM API ConnectCSRF

critical
9.9
First published (updated )
CVE-2018-1712

IBM API ConnectIBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication (TFA) wh…

high
8.1
First published (updated )
CVE-2018-1638

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

IBM API ConnectInput Validation

medium
5.4
First published (updated )
CVE-2018-1599

IBM API ConnectIBM API Connect information disclosure

medium
5.9
First published (updated )
CVE-2018-1546

IBM API ConnectInfoleak

medium
4.3
First published (updated )
CVE-2018-1532

IBM API ConnectXSS

medium
5.4
First published (updated )
CVE-2018-1430

IBM API ConnectIBM API Connect 5.0.0.0 through 5.0.8.2 is impacted by generated LoopBack APIs for a Model using the…

medium
6.5
First published (updated )
CVE-2018-1389

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

IBM API ConnectIBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker to …

critical
10
First published (updated )
CVE-2018-1469

IBM API ConnectXSS

medium
5.4
First published (updated )
CVE-2018-1382

IBM API ConnectInput Validation

medium
6.1
First published (updated )
CVE-2017-1551

IBM API ConnectInput Validation

medium
4.3
First published (updated )
CVE-2017-1555

IBM API ManagementIBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant pa…

medium
5.9
First published (updated )
CVE-2017-1386

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

IBM API ConnectIBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of t…

medium
5.3
First published (updated )
CVE-2017-1328

IBM API ConnectXEE

high
8.2
First published (updated )
CVE-2017-1322

IBM API ConnectInfoleak

high
7.5
First published (updated )
CVE-2017-1379

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203