Skip to content

Known vulnerabilities in IBM API Connect

Is your version affected?

CVE Summary Score Published
CVE-2018-1430 IBM API Connect 5.0.0.0 through 5.0.8.2 is vulnerable to cross-site scripting Not rated Apr 30, 2018
CVE-2018-1469 IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker to execute system… 9.8 Critical Apr 4, 2018
CVE-2018-1382 IBM API Connect 5.0.0.0 is vulnerable to cross-site scripting Not rated Feb 7, 2018
CVE-2017-1785 IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query parameters to obtain… Not rated Feb 7, 2018
CVE-2017-1555 IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed… Not rated Sep 25, 2017
CVE-2017-1551 IBM API Connect 5.0.0.0 through 5.0.7.2 could allow a remote attacker to hijack the clicking action of the victim Not rated Sep 25, 2017
CVE-2017-1556 IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that could allow an authenticated… Not rated Sep 13, 2017
CVE-2017-1386 IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which… Not rated Jul 31, 2017
CVE-2017-1328 IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by… Not rated Jun 27, 2017
CVE-2017-1322 IBM API Connect 5.0.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Not rated Jun 27, 2017
CVE-2017-1379 IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by improper handling of… Not rated Jun 15, 2017

Other IBM products