Show filters
89 Total Results
Displaying 71-80 of 89
Sort by:
Attacker Value
Unknown
CVE-2018-1548
Disclosure Date: July 09, 2018 (last updated November 27, 2024)
IBM API Connect 2018.1.0.0, 2018.2.1, 2018.2.2, 2018.2.3, and 2018.2.4 contains a vulnerability that could allow an authenticated user to obtain sensitive information. IBM X-Force ID: 142657.
0
Attacker Value
Unknown
CVE-2018-1546
Disclosure Date: July 06, 2018 (last updated November 27, 2024)
IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 142650.
0
Attacker Value
Unknown
CVE-2018-1532
Disclosure Date: May 31, 2018 (last updated November 26, 2024)
IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 142430.
0
Attacker Value
Unknown
CVE-2018-1468
Disclosure Date: May 02, 2018 (last updated November 26, 2024)
IBM API Connect 5.0.8.1 and 5.0.8.2 could allow a user to get access to internal environment and sensitive API details to which they are not authorized. IBM X-Force ID: 140399.
0
Attacker Value
Unknown
CVE-2018-1389
Disclosure Date: April 30, 2018 (last updated November 26, 2024)
IBM API Connect 5.0.0.0 through 5.0.8.2 is impacted by generated LoopBack APIs for a Model using the BelongsTo/HasMany relationship allowing unauthorized modification of information. IBM X-Force ID: 138213.
0
Attacker Value
Unknown
CVE-2018-1430
Disclosure Date: April 30, 2018 (last updated November 26, 2024)
IBM API Connect 5.0.0.0 through 5.0.8.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139226.
0
Attacker Value
Unknown
CVE-2018-1469
Disclosure Date: April 04, 2018 (last updated November 26, 2024)
IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker to execute system commands using specially crafted HTTP requests. IBM X-Force ID: 140605.
0
Attacker Value
Unknown
CVE-2018-1382
Disclosure Date: February 07, 2018 (last updated November 26, 2024)
IBM API Connect 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138079.
0
Attacker Value
Unknown
CVE-2017-1785
Disclosure Date: February 07, 2018 (last updated November 26, 2024)
IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query parameters to obtain sensitive information. IBM X-Force ID: 136859.
0
Attacker Value
Unknown
CVE-2017-1555
Disclosure Date: September 25, 2017 (last updated November 26, 2024)
IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed to the application plan. IBM X-Force ID: 131545.
0
