Aller au contenu

Vulnérabilités connues pour IBM API Connect

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2020-4825 IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site scripting 5.4 Moyenne 4 févr. 2021
CVE-2020-4640 Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in… 3.4 Faible 4 févr. 2021
CVE-2020-4838 IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting 6.4 Moyenne 12 janv. 2021
CVE-2020-4899 IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due… 7.4 Élevée 5 janv. 2021
CVE-2020-4638 IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation 7.2 Élevée 3 sept. 2020
CVE-2020-4337 IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server… 6.5 Moyenne 3 sept. 2020
CVE-2020-4452 IBM API Connect V2018.4.1.0 through 2018.4.1.11 uses weaker than expected cryptographic algorithms that could allow an… 5.9 Moyenne 29 juin 2020
CVE-2020-4251 IBM API Connect 5.0.0.0 through 5.0.8.8 is vulnerable to cross-site scripting 5.4 Moyenne 12 juin 2020
CVE-2020-4346 IBM API Connect's V2018.4.1.0 through 2018.4.1.10 management server has an unsecured api which can be exploited by an… 5.3 Moyenne 12 mai 2020
CVE-2020-4195 IBM API Connect V2018.4.1.0 through 2018.4.1.10 could allow a remote attacker to hijack the clicking action of the… 5.4 Moyenne 12 mai 2020
CVE-2019-4553 IBM API Connect V5.0.0.0 through 5.0.8.7iFix3 uses weaker than expected cryptographic algorithms that could allow an… 5.9 Moyenne 24 mars 2020
CVE-2019-4609 IBM API Connect 2018.4.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt… 5.9 Moyenne 18 déc. 2019
CVE-2019-4444 IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password… 5.1 Moyenne 16 déc. 2019
CVE-2019-4600 IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially… 5.3 Moyenne 28 oct. 2019
CVE-2019-4437 IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal servers and network… 8.2 Élevée 20 août 2019
CVE-2019-4460 IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to traverse directories on the… 4.3 Moyenne 20 août 2019
CVE-2019-4402 IBM API Connect 2018.1 through 2018.4.1.6 developer portal could allow an unauthorized user to cause a denial of service… 8.6 Élevée 20 août 2019
CVE-2019-4382 IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the… 5.3 Moyenne 25 juin 2019
CVE-2018-2013 IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid in… 5.3 Moyenne 25 juin 2019
CVE-2018-2011 IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially… 5.3 Moyenne 25 juin 2019
CVE-2018-1858 IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could allow an attacker to… 4.3 Moyenne 25 juin 2019
CVE-2019-4256 IBM API Connect 5.0.0.0 through 5.0.8.6 uses weaker than expected cryptographic algorithms that could allow an… 5.9 Moyenne 29 mai 2019
CVE-2018-1991 IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sensitive information that could provide critical information as… 2.7 Faible 22 mai 2019
CVE-2018-2015 IBM API Connect 2018.1 and 2018.4.1.4 could allow a remote attacker to hijack the clicking action of the victim 6.4 Moyenne 2 mai 2019
CVE-2018-2007 IBM API Connect 2018.1 and 2018.4.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to… 5.9 Moyenne 29 avr. 2019

Autres produits IBM