Description
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to inject platform credentials into outbound requests due to improper input validation. A validation check is not sufficiently strict, which could cause platform credentials to be included in outbound requests.
Published: 2026-11-07
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Credential injection via outbound requests
Action: Patch Now
AI Analysis

Impact

The vulnerability in IBM API Connect allows a remote attacker to inject platform credentials into outbound requests due to inadequate input validation that accepts credential-related data and forwards it without sanitization. The flaw is an instance of CWE‑863, an improper validation of client‑supplied data.

Affected Systems

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are affected. Users running these releases are at risk of having their platform credentials transmitted in outbound traffic.

Risk and Exploitability

The CVSS score of 5.3 indicates a medium severity. EPSS is unavailable, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited publicly known exploitation. However, the attack vector is remote as the description explicitly states a remote attacker can exploit the flaw. Successful exploitation would allow the attacker to capture platform credentials.

Generated by OpenCVE AI on November 7, 2026 at 09:35 UTC.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now by upgrading to v12.1.1.3 Fix Central Link: https://www.ibm.com/support/pages/node/7290205 IBM strongly recommends addressing the vulnerability now by upgrading to 10.0.8.13Fix Central Link: https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EWebSphere&product=ibm/WebSphere/IBM+API+Connect&release=10.0.8.12&platform=All&function=all

OpenCVE Recommended Actions

  • Apply the IBM API Connect 12.1.1.3 patch or the 10.0.8.13 patch as soon as possible
  • Immediately restrict outbound traffic from the API Connect nodes to authorized endpoints and enable logging of credential usage
  • Validate input handling in the API Connect configuration to ensure credentials are not propagated in outbound requests

Generated by OpenCVE AI on November 7, 2026 at 09:35 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 07 Nov 2026 04:45:00 +0000

Type Values Removed Values Added
Description IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to inject platform credentials into outbound requests due to improper input validation. A validation check is not sufficiently strict, which could cause platform credentials to be included in outbound requests.
Title Multiple Vulnerabilities in IBM API Connect
First Time appeared Ibm
Ibm api Connect
Weaknesses CWE-863
CPEs cpe:2.3:a:ibm:api_connect:10.0.8.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:api_connect:10.0.8.12:*:*:*:*:*:*:*
cpe:2.3:a:ibm:api_connect:12.1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:api_connect:12.1.1.2:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm api Connect
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'}

Subscriptions

Ibm Api Connect
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-11-07T04:31:20.554Z

Reserved: 2026-07-23T02:09:11.096Z

Link: CVE-2026-16711

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-07T05:18:20.040

Modified: 2026-11-07T05:18:20.163

Link: CVE-2026-16711

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-07T09:45:12Z

Weaknesses