| CVE-2020-4346 |
IBM API Connect's V2018.4.1.0 through 2018.4.1.10 management server has an unsecured api which can be exploited by an…
|
5.3
Moyenne
|
12 mai 2020 |
| CVE-2020-4195 |
IBM API Connect V2018.4.1.0 through 2018.4.1.10 could allow a remote attacker to hijack the clicking action of the…
|
5.4
Moyenne
|
12 mai 2020 |
| CVE-2019-4553 |
IBM API Connect V5.0.0.0 through 5.0.8.7iFix3 uses weaker than expected cryptographic algorithms that could allow an…
|
5.9
Moyenne
|
24 mars 2020 |
| CVE-2019-4609 |
IBM API Connect 2018.4.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
|
5.9
Moyenne
|
18 déc. 2019 |
| CVE-2019-4444 |
IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password…
|
5.1
Moyenne
|
16 déc. 2019 |
| CVE-2019-4600 |
IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially…
|
5.3
Moyenne
|
28 oct. 2019 |
| CVE-2019-4437 |
IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal servers and network…
|
8.2
Élevée
|
20 août 2019 |
| CVE-2019-4460 |
IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to traverse directories on the…
|
4.3
Moyenne
|
20 août 2019 |
| CVE-2019-4402 |
IBM API Connect 2018.1 through 2018.4.1.6 developer portal could allow an unauthorized user to cause a denial of service…
|
8.6
Élevée
|
20 août 2019 |
| CVE-2019-4382 |
IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the…
|
5.3
Moyenne
|
25 juin 2019 |
| CVE-2018-2013 |
IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid in…
|
5.3
Moyenne
|
25 juin 2019 |
| CVE-2018-2011 |
IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially…
|
5.3
Moyenne
|
25 juin 2019 |
| CVE-2018-1858 |
IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could allow an attacker to…
|
4.3
Moyenne
|
25 juin 2019 |
| CVE-2019-4256 |
IBM API Connect 5.0.0.0 through 5.0.8.6 uses weaker than expected cryptographic algorithms that could allow an…
|
5.9
Moyenne
|
29 mai 2019 |
| CVE-2018-1991 |
IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sensitive information that could provide critical information as…
|
2.7
Faible
|
22 mai 2019 |
| CVE-2018-2015 |
IBM API Connect 2018.1 and 2018.4.1.4 could allow a remote attacker to hijack the clicking action of the victim
|
6.4
Moyenne
|
2 mai 2019 |
| CVE-2018-2007 |
IBM API Connect 2018.1 and 2018.4.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to…
|
5.9
Moyenne
|
29 avr. 2019 |
| CVE-2019-4203 |
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from…
|
8.9
Élevée
|
15 avr. 2019 |
| CVE-2019-4202 |
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection
|
10.0
Critique
|
15 avr. 2019 |
| CVE-2019-4155 |
IBM API Connect's Developer Portal 2018.1 and 2018.4.1.3 is impacted by a privilege escalation vulnerability when…
|
8.8
Élevée
|
8 avr. 2019 |
| CVE-2019-4051 |
Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system…
|
5.3
Moyenne
|
8 avr. 2019 |
| CVE-2018-1874 |
IBM API Connect 5.0.0.0 through 5.0.8.5 could display highly sensitive information to an attacker with physical access…
|
4.6
Moyenne
|
2 avr. 2019 |
| CVE-2019-4052 |
IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover login ids of registered…
|
8.2
Élevée
|
22 mars 2019 |
| CVE-2018-2009 |
IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API
|
6.5
Moyenne
|
11 mars 2019 |
| CVE-2019-4008 |
API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak
|
9.0
Critique
|
7 févr. 2019 |