| CVE-2020-4825 |
IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site scripting
|
5.4
Medium
|
Feb 4, 2021 |
| CVE-2020-4640 |
Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in…
|
3.4
Low
|
Feb 4, 2021 |
| CVE-2020-4838 |
IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Jan 12, 2021 |
| CVE-2020-4899 |
IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due…
|
7.4
High
|
Jan 5, 2021 |
| CVE-2020-4638 |
IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation
|
7.2
High
|
Sep 3, 2020 |
| CVE-2020-4337 |
IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server…
|
6.5
Medium
|
Sep 3, 2020 |
| CVE-2020-4452 |
IBM API Connect V2018.4.1.0 through 2018.4.1.11 uses weaker than expected cryptographic algorithms that could allow an…
|
5.9
Medium
|
Jun 29, 2020 |
| CVE-2020-4251 |
IBM API Connect 5.0.0.0 through 5.0.8.8 is vulnerable to cross-site scripting
|
5.4
Medium
|
Jun 12, 2020 |
| CVE-2020-4346 |
IBM API Connect's V2018.4.1.0 through 2018.4.1.10 management server has an unsecured api which can be exploited by an…
|
5.3
Medium
|
May 12, 2020 |
| CVE-2020-4195 |
IBM API Connect V2018.4.1.0 through 2018.4.1.10 could allow a remote attacker to hijack the clicking action of the…
|
5.4
Medium
|
May 12, 2020 |
| CVE-2019-4553 |
IBM API Connect V5.0.0.0 through 5.0.8.7iFix3 uses weaker than expected cryptographic algorithms that could allow an…
|
5.9
Medium
|
Mar 24, 2020 |
| CVE-2019-4609 |
IBM API Connect 2018.4.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
|
5.9
Medium
|
Dec 18, 2019 |
| CVE-2019-4444 |
IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password…
|
5.1
Medium
|
Dec 16, 2019 |
| CVE-2019-4600 |
IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially…
|
5.3
Medium
|
Oct 28, 2019 |
| CVE-2019-4437 |
IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal servers and network…
|
8.2
High
|
Aug 20, 2019 |
| CVE-2019-4460 |
IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to traverse directories on the…
|
4.3
Medium
|
Aug 20, 2019 |
| CVE-2019-4402 |
IBM API Connect 2018.1 through 2018.4.1.6 developer portal could allow an unauthorized user to cause a denial of service…
|
8.6
High
|
Aug 20, 2019 |
| CVE-2019-4382 |
IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the…
|
5.3
Medium
|
Jun 25, 2019 |
| CVE-2018-2013 |
IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid in…
|
5.3
Medium
|
Jun 25, 2019 |
| CVE-2018-2011 |
IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially…
|
5.3
Medium
|
Jun 25, 2019 |
| CVE-2018-1858 |
IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could allow an attacker to…
|
4.3
Medium
|
Jun 25, 2019 |
| CVE-2019-4256 |
IBM API Connect 5.0.0.0 through 5.0.8.6 uses weaker than expected cryptographic algorithms that could allow an…
|
5.9
Medium
|
May 29, 2019 |
| CVE-2018-1991 |
IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sensitive information that could provide critical information as…
|
2.7
Low
|
May 22, 2019 |
| CVE-2018-2015 |
IBM API Connect 2018.1 and 2018.4.1.4 could allow a remote attacker to hijack the clicking action of the victim
|
6.4
Medium
|
May 2, 2019 |
| CVE-2018-2007 |
IBM API Connect 2018.1 and 2018.4.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to…
|
5.9
Medium
|
Apr 29, 2019 |