Skip to content

Known vulnerabilities in IBM API Connect

Is your version affected?

CVE Summary Score Published
CVE-2026-9074 IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection… 9.1 Critical Jul 8, 2026
CVE-2025-13915 IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication… 9.8 Critical Dec 26, 2025
CVE-2019-4202 IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection 10.0 Critical Apr 15, 2019
CVE-2019-4008 API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak 9.0 Critical Feb 7, 2019
CVE-2018-1469 IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker to execute system… 9.8 Critical Apr 4, 2018

Other IBM products