Show filters
89 Total Results
Displaying 41-50 of 89
Sort by:
Attacker Value
Unknown
CVE-2018-2011
Disclosure Date: June 25, 2019 (last updated November 27, 2024)
IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially crafted HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 155150.
0
Attacker Value
Unknown
CVE-2018-1858
Disclosure Date: June 25, 2019 (last updated November 27, 2024)
IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 151256.
0
Attacker Value
Unknown
CVE-2018-2013
Disclosure Date: June 25, 2019 (last updated November 27, 2024)
IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid in further attacks against the system. IBM X-Force ID: 155193.
0
Attacker Value
Unknown
CVE-2019-4382
Disclosure Date: June 25, 2019 (last updated November 27, 2024)
IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the system users using specially crafted HTTP requests. IBM X-Force ID: 162162.
0
Attacker Value
Unknown
CVE-2019-4256
Disclosure Date: May 29, 2019 (last updated November 27, 2024)
IBM API Connect 5.0.0.0 through 5.0.8.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 159944.
0
Attacker Value
Unknown
CVE-2018-1991
Disclosure Date: May 22, 2019 (last updated November 27, 2024)
IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sensitive information that could provide critical information as to the underlying software stack in CMC UI headers. IBM X-Force ID: 154284.
0
Attacker Value
Unknown
CVE-2018-2015
Disclosure Date: May 02, 2019 (last updated November 27, 2024)
IBM API Connect 2018.1 and 2018.4.1.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 155195.
0
Attacker Value
Unknown
CVE-2018-2007
Disclosure Date: April 29, 2019 (last updated November 27, 2024)
IBM API Connect 2018.1 and 2018.4.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 155078.
0
Attacker Value
Unknown
CVE-2019-4202
Disclosure Date: April 15, 2019 (last updated November 27, 2024)
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted request can run arbitrary code on the server and gain complete access to the system. IBM X-Force ID: 159123.
0
Attacker Value
Unknown
CVE-2019-4203
Disclosure Date: April 15, 2019 (last updated November 27, 2024)
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124.
0
