| CVE-2019-4203 |
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from…
|
8.9
Élevée
|
15 avr. 2019 |
| CVE-2019-4202 |
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection
|
10.0
Critique
|
15 avr. 2019 |
| CVE-2019-4155 |
IBM API Connect's Developer Portal 2018.1 and 2018.4.1.3 is impacted by a privilege escalation vulnerability when…
|
8.8
Élevée
|
8 avr. 2019 |
| CVE-2019-4051 |
Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system…
|
5.3
Moyenne
|
8 avr. 2019 |
| CVE-2018-1874 |
IBM API Connect 5.0.0.0 through 5.0.8.5 could display highly sensitive information to an attacker with physical access…
|
4.6
Moyenne
|
2 avr. 2019 |
| CVE-2019-4052 |
IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover login ids of registered…
|
8.2
Élevée
|
22 mars 2019 |
| CVE-2018-2009 |
IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API
|
6.5
Moyenne
|
11 mars 2019 |
| CVE-2019-4008 |
API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak
|
9.0
Critique
|
7 févr. 2019 |
| CVE-2018-1976 |
IBM API Connect 5.0.0.0 through 5.0.8.4 is impacted by sensitive information disclosure via a REST API that could…
|
4.9
Moyenne
|
29 janv. 2019 |
| CVE-2018-1932 |
IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the…
|
4.9
Moyenne
|
8 janv. 2019 |
| CVE-2018-1859 |
IBM API Connect 5.0.0.0 through 5.0.8.4 could allow a user authenticated as an administrator with limited rights to…
|
4.3
Moyenne
|
4 janv. 2019 |
| CVE-2018-1973 |
IBM API Connect 5.0.0.0 through 5.0.8.4 allows a user with limited 'API Administrator level access to give themselves…
|
7.2
Élevée
|
20 déc. 2018 |
| CVE-2018-1778 |
IBM LoopBack (IBM API Connect 2018.1, 2018.4.1, 5.0.8.0, and 5.0.8.4) could allow an attacker to bypass authentication…
|
7.7
Élevée
|
20 déc. 2018 |
| CVE-2018-1784 |
IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework
|
7.1
Élevée
|
20 déc. 2018 |
| CVE-2018-1779 |
IBM API Connect 2018.1 through 2018.3.7 could allow an unauthenticated attacker to cause a denial of service due to…
|
7.5
Élevée
|
20 nov. 2018 |
| CVE-2018-1774 |
IBM API Connect 5.0.0.0, 5.0.8.4, 2018.1 and 2018.3.6 is vulnerable to CSV injection via the developer portal and…
|
8.9
Élevée
|
9 nov. 2018 |
| CVE-2018-1789 |
IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a…
|
8.4
Élevée
|
7 sept. 2018 |
| CVE-2018-1599 |
IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to hijack the clicking action of the victim
|
5.4
Moyenne
|
22 août 2018 |
| CVE-2018-1712 |
IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery
|
8.6
Élevée
|
16 août 2018 |
| CVE-2018-1638 |
IBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication (TFA) while resetting a user…
|
5.9
Moyenne
|
31 juil. 2018 |
| CVE-2018-1548 |
IBM API Connect 2018.1.0.0, 2018.2.1, 2018.2.2, 2018.2.3, and 2018.2.4 contains a vulnerability that could allow an…
|
4.3
Moyenne
|
9 juil. 2018 |
| CVE-2018-1546 |
IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to obtain sensitive information, caused by the…
|
5.9
Moyenne
|
6 juil. 2018 |
| CVE-2018-1532 |
IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each request, which could allow a…
|
4.3
Moyenne
|
31 mai 2018 |
| CVE-2018-1468 |
IBM API Connect 5.0.8.1 and 5.0.8.2 could allow a user to get access to internal environment and sensitive API details…
|
Non notée
|
2 mai 2018 |
| CVE-2018-1389 |
IBM API Connect 5.0.0.0 through 5.0.8.2 is impacted by generated LoopBack APIs for a Model using the BelongsTo/HasMany…
|
Non notée
|
30 avr. 2018 |