| CVE-2026-16711 |
Multiple Vulnerabilities in IBM API Connect
|
5.3
Moyenne
|
7 nov. 2026 |
| CVE-2026-16710 |
Multiple Vulnerabilities in IBM API Connect
|
5.8
Moyenne
|
7 nov. 2026 |
| CVE-2026-16709 |
Multiple Vulnerabilities in IBM API Connect
|
8.7
Élevée
|
7 nov. 2026 |
| CVE-2026-16679 |
IBM API Connect Path Traversal
|
4.3
Moyenne
|
7 nov. 2026 |
| CVE-2026-108178 |
Multiple Vulnerabilities in IBM API Connect
|
4.2
Moyenne
|
7 nov. 2026 |
| CVE-2026-105459 |
Multiple Vulnerabilities in IBM API Connect
|
6.8
Moyenne
|
7 nov. 2026 |
| CVE-2026-105002 |
Multiple Vulnerabilities in IBM API Connect
|
7.5
Élevée
|
7 nov. 2026 |
| CVE-2026-17362 |
Multiple Vulnerabilities in IBM API Connect
|
9.8
Critique
|
7 nov. 2026 |
| CVE-2026-9074 |
IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection…
|
9.1
Critique
|
8 juil. 2026 |
| CVE-2026-3144 |
IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized…
|
8.1
Élevée
|
8 juil. 2026 |
| CVE-2025-13915 |
IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication…
|
9.8
Critique
|
26 déc. 2025 |
| CVE-2023-47722 |
IBM API Connect V10.0.5.3 and V10.0.6.0 stores user credentials in browser cache which can be read by a local user
|
6.2
Moyenne
|
9 déc. 2023 |
| CVE-2023-28522 |
IBM API Connect V10 could allow an authenticated user to perform actions that they should not have access to
|
4.3
Moyenne
|
12 mai 2023 |
| CVE-2022-34350 |
IBM API Connect 10.0.0.0 through 10.0.5.0, 10.0.1.0 through 10.0.1.7, and 2018.4.1.0 through 2018.4.1.20 is vulnerable…
|
5.3
Moyenne
|
8 févr. 2023 |
| CVE-2021-38997 |
IBM API Connect V10.0.0.0 through V10.0.5.0, V10.0.1.0 through V10.0.1.7, and V2018.4.1.0 through 2018.4.1.19 is…
|
5.4
Moyenne
|
1 déc. 2022 |
| CVE-2021-29772 |
IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input
|
5.6
Moyenne
|
26 août 2021 |
| CVE-2021-29715 |
IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive information or conduct denial of…
|
6.5
Moyenne
|
26 août 2021 |
| CVE-2020-4706 |
IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to HTTP header injection, caused by improper validation of…
|
5.4
Moyenne
|
17 août 2021 |
| CVE-2020-4707 |
IBM API Connect 5.0.0.0 through 5.0.8.11 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
4 août 2021 |
| CVE-2021-20440 |
IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended…
|
6.4
Moyenne
|
15 mars 2021 |
| CVE-2020-4903 |
IBM API Connect V10 and V2018 could allow an attacker who has intercepted a registration invitation link to…
|
4.8
Moyenne
|
8 mars 2021 |
| CVE-2020-4695 |
IBM API Connect V10 is impacted by insecure communications during database replication
|
5.9
Moyenne
|
8 mars 2021 |
| CVE-2020-4828 |
IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to web cache poisoning,…
|
6.5
Moyenne
|
4 févr. 2021 |
| CVE-2020-4827 |
IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery…
|
4.3
Moyenne
|
4 févr. 2021 |
| CVE-2020-4826 |
IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery…
|
4.3
Moyenne
|
4 févr. 2021 |