Ibm Api Connect vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ibm Api Connect: 3 record(s), with affected versions and fixes.
cpe:2.3:a:ibm:api_connect

CVE-2026-9074 Critical · 9.8 CWE-89 Jul 8, 2026

IBM API Connect SQL Injection

IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functionality.

CVE-2026-3144 Critical · 9.8 CWE-1392 Jul 8, 2026

IBM API Connect Default Credentials

IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized access to the application before the system enforces a credential update.

CVE-2025-13915 Critical · 9.8 CWE-305 Dec 26, 2025

Authentication bypass in IBM API Connect

IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.