Known vulnerabilities in IBM API Connect

Software CPE: cpe:2.3:a:ibm_corporation:ibm_api_connect:*:*:*:*:*:*:*:*
Total vulnerabilities: 236
Public exploits: 24
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM API Connect IBM API Connect is affected by 236 known vulnerabilities: 3 critical, 28 high, 73 medium, 132 low Critical High Medium Low

Vulnerabilities (236)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114769 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-8941
CWE-59 Low
No
No
10.0.8.5 03.09.2025 SB2025090350
SB2025090372
SB2025090373
and 20 more
#VU113032 - Uncaught Exception
CVE-2025-7338
CWE-248 Medium
No
No
10.0.8.5 18.07.2025 SB2025071811
SB2025082823
SB2025091818
and 8 more
#VU112882 - Uncontrolled Recursion
CVE-2025-4565
CWE-674 Medium
No
No
10.0.8.5 14.07.2025 SB2025071429
SB2025071430
SB2025071431
and 21 more
#VU112440 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2025-3576
CWE-327 Medium
No
No
10.0.8.5 07.07.2025 SB2025070764
SB2025070769
SB2025070770
and 29 more
#VU111971 - Improper Authorization
CVE-2025-4563
CWE-285 Low
No
No
10.0.8.5 26.06.2025 SB2025062632
SB2025062645
SB2025062646
and 7 more
#VU111970 - Expected Behavior Violation
CVE-2025-4435
CWE-440 Low
No
No
10.0.8.5 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 59 more
#VU111968 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4138
CWE-59 High
Available
No
10.0.8.5 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 64 more
#VU111967 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4330
CWE-59 High
No
No
10.0.8.5 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 63 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517
CWE-22 High
Available
No
10.0.8.5 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU110253 - Protection Mechanism Failure
CVE-2025-22874
CWE-693 Low
No
No
10.0.8.5 07.06.2025 SB2025060702
SB2025061002
SB2025081114
and 16 more
#VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-47273
CWE-22 High
No
No
10.0.8.5 27.05.2025 SB2025052721
SB2025052734
SB2025052736
and 112 more
#VU107595 - Out-of-bounds read
CVE-2025-32414
CWE-125 Medium
No
No
10.0.8.5 17.04.2025 SB2025041758
SB2025041850
SB2025041880
and 56 more
#VU105900 - Memory corruption
CVE-2025-25724
CWE-119 High
No
No
10.0.8.5 20.03.2025 SB2025032034
SB2025032045
SB2025032169
and 25 more
#VU105879 - Use After Free
CVE-2024-55549
CWE-416 High
No
No
10.0.8.5 19.03.2025 SB2025031964
SB2025031965
SB2025032155
and 69 more
#VU105723 - Stack-based buffer overflow
CVE-2024-8176
CWE-121 High
No
No
10.0.8.5 14.03.2025 SB2025031426
SB2025031429
SB2025031430
and 105 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928
CWE-121 High
No
No
10.0.8.5 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU103812 - Improper input validation
CVE-2025-0938
CWE-20 Low
No
No
10.0.8.5 11.02.2025 SB20250211115
SB20250211130
SB20250211131
and 77 more
#VU103504 - Out-of-bounds write
CVE-2025-24528
CWE-787 Medium
No
No
10.0.8.5 03.02.2025 SB2025020331
SB2025020352
SB2025020412
and 49 more
#VU97631 - Insecure inherited permissions
CVE-2024-7143
CWE-277 Medium
No
No
10.0.8.5 20.09.2024 SB2024092030
SB2024092068
SB2025060536
and 2 more
#VU9687 - Memory corruption
CVE-2017-9047
CWE-119 Low
No
No
10.0.8.5 19.12.2017 SB2017121308
SB2017111019
SB2022110928
and 29 more


Showing elements 1 - 20 out of 236