Filtered by vendor Ibm
Subscriptions
Filtered by product Api Connect
Subscriptions
Total
78 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2018-1789 | 1 Ibm | 1 Api Connect | 2024-09-17 | N/A |
| IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a server side request forgery attack. IBM X-Force ID: 148939. | ||||
| CVE-2020-4838 | 1 Ibm | 1 Api Connect | 2024-09-17 | 5.4 Medium |
| IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190036. | ||||
| CVE-2018-1546 | 1 Ibm | 1 Api Connect | 2024-09-17 | 5.9 Medium |
| IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 142650. | ||||
| CVE-2018-1382 | 1 Ibm | 1 Api Connect | 2024-09-17 | N/A |
| IBM API Connect 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138079. | ||||
| CVE-2019-4382 | 1 Ibm | 1 Api Connect | 2024-09-17 | 5.3 Medium |
| IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the system users using specially crafted HTTP requests. IBM X-Force ID: 162162. | ||||
| CVE-2019-4202 | 1 Ibm | 1 Api Connect | 2024-09-17 | 10.0 Critical |
| IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted request can run arbitrary code on the server and gain complete access to the system. IBM X-Force ID: 159123. | ||||
| CVE-2019-4600 | 1 Ibm | 1 Api Connect | 2024-09-17 | 5.3 Medium |
| IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 167883. | ||||
| CVE-2020-4827 | 1 Ibm | 1 Api Connect | 2024-09-17 | 4.3 Medium |
| IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 189841. | ||||
| CVE-2020-4825 | 1 Ibm | 1 Api Connect | 2024-09-17 | 5.4 Medium |
| IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 189839. | ||||
| CVE-2020-4337 | 1 Ibm | 1 Api Connect | 2024-09-17 | 6.5 Medium |
| IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server to generate user registration emails that contain malicious URLs. IBM X-Force ID: 177933. | ||||
| CVE-2019-4052 | 1 Ibm | 1 Api Connect | 2024-09-16 | 7.5 High |
| IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover login ids of registered users. IBM X-Force ID: 156544. | ||||
| CVE-2018-1712 | 1 Ibm | 1 Api Connect | 2024-09-16 | N/A |
| IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network. IBM X-Force ID: 146370. | ||||
| CVE-2020-4638 | 1 Ibm | 1 Api Connect | 2024-09-16 | 7.2 High |
| IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation link. IBM X-Force ID: 185508. | ||||
| CVE-2018-1599 | 1 Ibm | 1 Api Connect | 2024-09-16 | N/A |
| IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 143744. | ||||
| CVE-2018-1932 | 1 Ibm | 1 Api Connect | 2024-09-16 | N/A |
| IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the management server that could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 153175. | ||||
| CVE-2018-2013 | 1 Ibm | 1 Api Connect | 2024-09-16 | 5.3 Medium |
| IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid in further attacks against the system. IBM X-Force ID: 155193. | ||||
| CVE-2018-1638 | 1 Ibm | 1 Api Connect | 2024-09-16 | N/A |
| IBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication (TFA) while resetting a user password but enforces it for all other login scenarios. IBM X-Force ID: 144483. | ||||
| CVE-2019-4437 | 1 Ibm | 1 Api Connect | 2024-09-16 | 5.3 Medium |
| IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal servers and network via API swagger. IBM X-force ID: 162947. | ||||
| CVE-2018-1784 | 1 Ibm | 1 Api Connect | 2024-09-16 | N/A |
| IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework. IBM X-Force ID: 148807. | ||||
| CVE-2018-1548 | 1 Ibm | 1 Api Connect | 2024-09-16 | N/A |
| IBM API Connect 2018.1.0.0, 2018.2.1, 2018.2.2, 2018.2.3, and 2018.2.4 contains a vulnerability that could allow an authenticated user to obtain sensitive information. IBM X-Force ID: 142657. | ||||