Vulnerabilidades do Ibm Api Connect

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Ibm Api Connect: 3 registro(s), com versões afetadas e correções.
cpe:2.3:a:ibm:api_connect

CVE-2026-9074 Crítica · 9.8 CWE-89 08/07/2026

IBM API Connect SQL Injection

IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functionality.

CVE-2026-3144 Crítica · 9.8 CWE-1392 08/07/2026

IBM API Connect Default Credentials

IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized access to the application before the system enforces a credential update.

CVE-2025-13915 Crítica · 9.8 CWE-305 26/12/2025

Authentication bypass in IBM API Connect

IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.