| CVE-2018-1430 |
IBM API Connect 5.0.0.0 through 5.0.8.2 is vulnerable to cross-site scripting
|
Non notée
|
30 avr. 2018 |
| CVE-2018-1469 |
IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker to execute system…
|
9.8
Critique
|
4 avr. 2018 |
| CVE-2018-1382 |
IBM API Connect 5.0.0.0 is vulnerable to cross-site scripting
|
Non notée
|
7 févr. 2018 |
| CVE-2017-1785 |
IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query parameters to obtain…
|
Non notée
|
7 févr. 2018 |
| CVE-2017-1555 |
IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed…
|
Non notée
|
25 sept. 2017 |
| CVE-2017-1551 |
IBM API Connect 5.0.0.0 through 5.0.7.2 could allow a remote attacker to hijack the clicking action of the victim
|
Non notée
|
25 sept. 2017 |
| CVE-2017-1556 |
IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that could allow an authenticated…
|
Non notée
|
13 sept. 2017 |
| CVE-2017-1386 |
IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which…
|
Non notée
|
31 juil. 2017 |
| CVE-2017-1328 |
IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by…
|
Non notée
|
27 juin 2017 |
| CVE-2017-1322 |
IBM API Connect 5.0.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
|
Non notée
|
27 juin 2017 |
| CVE-2017-1379 |
IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by improper handling of…
|
Non notée
|
15 juin 2017 |