Known vulnerabilities in IBM API Connect - page 12

Software CPE: cpe:2.3:a:ibm_corporation:ibm_api_connect:*:*:*:*:*:*:*:*
Total vulnerabilities: 236
Public exploits: 24
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM API Connect IBM API Connect is affected by 236 known vulnerabilities: 3 critical, 28 high, 73 medium, 132 low Critical High Medium Low

Vulnerabilities (236)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106056 - Improper Encoding or Escaping of Output
CVE-2021-38997
CWE-116 Low
No
No
10.0.1.8, 10.0.5.1, 2018.4.1.20 26.03.2025 SB2021122261
#VU76479 - Exposure of sensitive information to an unauthorized actor
CVE-2016-3012
CWE-200 Medium
No
No
5.0.3 24.05.2023 SB2016120120
#VU55101 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-32610
CWE-59 High
No
No
10.0.1.4, 2018.4.1.17 20.07.2021 SB2021072062
SB2021072221
SB2021102617
and 12 more
#VU51505 - Exposure of sensitive information to an unauthorized actor
CVE-2021-20440
CWE-200 Medium
No
No
10.0.1, 2018.4.1.15 16.03.2021 SB2021031616
#VU18279 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-4202
CWE-78 High
No
No
- 16.04.2019 SB2019041603
#VU18278 - Server-Side Request Forgery (SSRF)
CVE-2019-4203
CWE-918 Medium
No
No
- 16.04.2019 SB2019041603
#VU17334 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1976
CWE-200 Low
No
No
5.0.8.5 31.01.2019 SB2019013107
#VU16894 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1932
CWE-200 Low
No
No
5.0.8.5 09.01.2019 SB2019010905
#VU16717 - Permissions, Privileges, and Access Controls
CVE-2018-1778
CWE-264 Low
No
No
5.0.8.5 26.12.2018 SB2018122406
#VU16716 - Permissions, Privileges, and Access Controls
CVE-2018-1784
CWE-264 Low
No
No
5.0.8.5 26.12.2018 SB2018122406
#VU16675 - Permissions, Privileges, and Access Controls
CVE-2018-1973
CWE-264 Low
No
No
5.0.8.5 18.12.2018 SB2018122406
#VU16026 - Permissions, Privileges, and Access Controls
CVE-2018-1779
CWE-264 Low
No
No
2018.4.1 15.11.2018 SB2018112304
#VU15618 - Exposure of sensitive information to an unauthorized actor
CVE-2017-12618
CWE-200 Low
No
No
5.0.8.12 31.10.2018 SB2018103106
SB2017102716
SB2017120510
and 6 more
#VU9477 - Exposure of sensitive information to an unauthorized actor
CVE-2017-12613
CWE-200 Medium
No
No
5.0.8.12 30.11.2017 SB2017113015
SB2017102712
SB2017120608
and 16 more
#VU8504 - Use After Free
CVE-2017-9798
CWE-416 Low
Available
No
5.0.8.12 19.09.2017 SB2017092001
SB2017091801
SB2017092117
and 28 more
#VU7119 - Out-of-bounds read
CVE-2017-7679
CWE-125 Medium
Available
No
5.0.8.12 20.06.2017 SB2017062001
SB2017062807
SB2017063012
and 26 more


Showing elements 221 - 240 out of 236