Description
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to enumerate usernames due to observable differences in response behavior.
Published: 2026-11-07
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Information disclosure via username enumeration
Action: Patch
AI Analysis

Impact

This vulnerability enables a remote attacker to discover usernames by observing differences in response behavior. The weakness is a classic case of information disclosure, classified as CWE‑204, and could serve as a foothold for further attacks if the enumerated usernames are later targeted.

Affected Systems

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are affected. The product recommendation is to upgrade to version 12.1.1.3 or later, following IBM’s guidance.

Risk and Exploitability

The CVSS score of 5.3 indicates a moderate severity. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog. A remote attacker can exploit the flaw by sending crafted requests and analyzing the differing responses, without needing authentication or special privileges.

Generated by OpenCVE AI on November 7, 2026 at 08:22 UTC.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now by upgrading to v12.1.1.3 Fix Central Link: https://www.ibm.com/support/pages/node/7290205

OpenCVE Recommended Actions

  • Upgrade IBM API Connect to version 12.1.1.3 or later according to IBM’s guidance
  • Restrict remote access to the API Connect service by configuring firewalls or VPN restrictions to limit exposure
  • Monitor API logs for repeated enumeration attempts and investigate any anomalous activity

Generated by OpenCVE AI on November 7, 2026 at 08:22 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 08 Nov 2026 07:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 07 Nov 2026 04:45:00 +0000

Type Values Removed Values Added
Description IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to enumerate usernames due to observable differences in response behavior.
Title Multiple Vulnerabilities in IBM API Connect
First Time appeared Ibm
Ibm api Connect
Weaknesses CWE-204
CPEs cpe:2.3:a:ibm:api_connect:12.1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:api_connect:12.1.1.2:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm api Connect
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}

Subscriptions

Ibm Api Connect
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-11-08T01:59:51.901Z

Reserved: 2026-07-24T19:18:49.892Z

Link: CVE-2026-17202

cve-icon Vulnrichment

Updated: 2026-11-08T01:49:34.034Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-07T05:18:30.033

Modified: 2026-11-08T02:16:59.700

Link: CVE-2026-17202

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-07T08:30:15Z

Weaknesses
  • CWE-204

    Observable Response Discrepancy