| CVE-2026-9074 |
IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection…
|
9.1
Critique
|
8 juil. 2026 |
| CVE-2026-3144 |
IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized…
|
8.1
Élevée
|
8 juil. 2026 |
| CVE-2025-13915 |
IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication…
|
9.8
Critique
|
26 déc. 2025 |
| CVE-2023-47722 |
IBM API Connect V10.0.5.3 and V10.0.6.0 stores user credentials in browser cache which can be read by a local user
|
6.2
Moyenne
|
9 déc. 2023 |
| CVE-2023-28522 |
IBM API Connect V10 could allow an authenticated user to perform actions that they should not have access to
|
4.3
Moyenne
|
12 mai 2023 |
| CVE-2022-34350 |
IBM API Connect 10.0.0.0 through 10.0.5.0, 10.0.1.0 through 10.0.1.7, and 2018.4.1.0 through 2018.4.1.20 is vulnerable…
|
5.3
Moyenne
|
8 févr. 2023 |
| CVE-2021-38997 |
IBM API Connect V10.0.0.0 through V10.0.5.0, V10.0.1.0 through V10.0.1.7, and V2018.4.1.0 through 2018.4.1.19 is…
|
5.4
Moyenne
|
1 déc. 2022 |
| CVE-2021-29772 |
IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input
|
5.6
Moyenne
|
26 août 2021 |
| CVE-2021-29715 |
IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive information or conduct denial of…
|
6.5
Moyenne
|
26 août 2021 |
| CVE-2020-4706 |
IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to HTTP header injection, caused by improper validation of…
|
5.4
Moyenne
|
17 août 2021 |
| CVE-2020-4707 |
IBM API Connect 5.0.0.0 through 5.0.8.11 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
4 août 2021 |
| CVE-2021-20440 |
IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended…
|
6.4
Moyenne
|
15 mars 2021 |
| CVE-2020-4903 |
IBM API Connect V10 and V2018 could allow an attacker who has intercepted a registration invitation link to…
|
4.8
Moyenne
|
8 mars 2021 |
| CVE-2020-4695 |
IBM API Connect V10 is impacted by insecure communications during database replication
|
5.9
Moyenne
|
8 mars 2021 |
| CVE-2020-4828 |
IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to web cache poisoning,…
|
6.5
Moyenne
|
4 févr. 2021 |
| CVE-2020-4827 |
IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery…
|
4.3
Moyenne
|
4 févr. 2021 |
| CVE-2020-4826 |
IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery…
|
4.3
Moyenne
|
4 févr. 2021 |
| CVE-2020-4825 |
IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
4 févr. 2021 |
| CVE-2020-4640 |
Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in…
|
3.4
Faible
|
4 févr. 2021 |
| CVE-2020-4838 |
IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
12 janv. 2021 |
| CVE-2020-4899 |
IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due…
|
7.4
Élevée
|
5 janv. 2021 |
| CVE-2020-4638 |
IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation
|
7.2
Élevée
|
3 sept. 2020 |
| CVE-2020-4337 |
IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server…
|
6.5
Moyenne
|
3 sept. 2020 |
| CVE-2020-4452 |
IBM API Connect V2018.4.1.0 through 2018.4.1.11 uses weaker than expected cryptographic algorithms that could allow an…
|
5.9
Moyenne
|
29 juin 2020 |
| CVE-2020-4251 |
IBM API Connect 5.0.0.0 through 5.0.8.8 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
12 juin 2020 |