Description
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information from internal network resources due to server-side request forgery.
Published: 2026-11-07
Score: 5.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Remote Information Disclosure
Action: Immediate Patch
AI Analysis

Impact

The vulnerability is a server‑side request forgery that allows an attacker who can send a crafted request to the API Connect instance to cause the server to perform arbitrary HTTP requests to internal resources. This can lead to the disclosure of sensitive data that resides behind the corporate firewall. The flaw does not provide code execution but can compromise confidentiality of internal services.

Affected Systems

IBM API Connect version 12.1.0.0 through 12.1.1.2. The affected installation includes the default deployable images supplied by IBM for these releases.

Risk and Exploitability

IBM assigns a CVSS score of 5.8, indicating a moderate severity. The official EPSS score is not available, so the exploitation likelihood cannot be quantified but the vulnerability is known to be a server‑side request forgery, which is often exploitable from a remote endpoint. The CVE is not listed in the CISA KEV catalog, and the attack vector would typically involve direct HTTP requests to the API Connect gateway. IBM recommends upgrading immediately to address the issue.

Generated by OpenCVE AI on November 7, 2026 at 07:09 UTC.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now by upgrading to v12.1.1.3 Fix Central Link: https://www.ibm.com/support/pages/node/7290205

OpenCVE Recommended Actions

  • Upgrade IBM API Connect to version 12.1.1.3 or later, following IBM's instructions from the support reference link.
  • Restrict the outbound network access of the API Connect instance by configuring firewall rules or the SDK so that it can only reach approved addresses, thereby limiting the impact of any remaining SSRF.
  • Monitor for anomalous outbound traffic patterns from the API Connect gateway and keep the system updated with the latest patches after the initial upgrade.

Generated by OpenCVE AI on November 7, 2026 at 07:09 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 07 Nov 2026 04:45:00 +0000

Type Values Removed Values Added
Description IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information from internal network resources due to server-side request forgery.
Title Multiple Vulnerabilities in IBM API Connect
First Time appeared Ibm
Ibm api Connect
Weaknesses CWE-918
CPEs cpe:2.3:a:ibm:api_connect:12.1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:api_connect:12.1.1.2:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm api Connect
References
Metrics cvssV3_1

{'score': 5.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N'}

Subscriptions

Ibm Api Connect
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-11-07T04:32:57.966Z

Reserved: 2026-07-25T01:13:42.123Z

Link: CVE-2026-17306

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-07T05:18:38.843

Modified: 2026-11-07T05:18:38.983

Link: CVE-2026-17306

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-07T10:15:14Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)