Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm api connect 5.0.0.0 vulnerabilities and exploits
(subscribe to this query)
5.3
CVSSv3
CVE-2017-1328
IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote malicious user to bypass security restrictions of the api, caused by improper handling of security policy. By crafting a suitable request, an attacker could exploit this vulnerability to bypass security and use the vulnerable...
Ibm Api Connect 5.0.3.0
Ibm Api Connect 5.0.2.0
Ibm Api Connect 5.0.1.0
Ibm Api Connect 5.0.0.1
Ibm Api Connect 5.0.6.0
Ibm Api Connect 5.0.4.0
Ibm Api Connect 5.0.0.0
Ibm Api Connect 5.0.6.2
Ibm Api Connect 5.0.6.1
Ibm Api Connect 5.0.5.0
8.2
CVSSv3
CVE-2017-1322
IBM API Connect 5.0.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125918.
Ibm Api Connect 5.0.6.2
Ibm Api Connect 5.0.1.0
Ibm Api Connect 5.0.0.0
Ibm Api Connect 5.0.6.0
Ibm Api Connect 5.0.5.0
Ibm Api Connect 5.0.4.0
Ibm Api Connect 5.0.3.0
Ibm Api Connect 5.0.2.0
Ibm Api Connect 5.0.7.0
Ibm Api Connect 5.0.6.1
Ibm Api Connect 5.0.0.1
7.5
CVSSv3
CVE-2017-1379
IBM API Connect 5.0.0.0 could allow a remote malicious user to obtain sensitive information, caused by improper handling of requests to the Developer Portal. IBM X-Force ID: 127002.
Ibm Api Connect 5.0.3.0
Ibm Api Connect 5.0.5.0
Ibm Api Connect 5.0.7.1
Ibm Api Connect 5.0.0.1
Ibm Api Connect 5.0.1.0
Ibm Api Connect 5.0.6.0
Ibm Api Connect 5.0.6.1
Ibm Api Connect 5.0.6.2
Ibm Api Connect 5.0.7.0
Ibm Api Connect 5.0.2.0
Ibm Api Connect 5.0.4.0
Ibm Api Connect 5.0.0.0
6.1
CVSSv3
CVE-2017-1551
IBM API Connect 5.0.0.0 up to and including 5.0.7.2 could allow a remote malicious user to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions ...
Ibm Api Connect 5.0.0.0
Ibm Api Connect 5.0.0.1
Ibm Api Connect 5.0.7.2
Ibm Api Connect 5.0.5.0
Ibm Api Connect 5.0.6.0
Ibm Api Connect 5.0.6.1
Ibm Api Connect 5.0.6.2
Ibm Api Connect 5.0.1.0
Ibm Api Connect 5.0.3.0
Ibm Api Connect 5.0.6.4
Ibm Api Connect 5.0.7.1
Ibm Api Connect 5.0.2.0
Ibm Api Connect 5.0.4.0
Ibm Api Connect 5.0.6.3
Ibm Api Connect 5.0.7.0
4.3
CVSSv3
CVE-2017-1555
IBM API Connect 5.0.0.0 up to and including 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed to the application plan. IBM X-Force ID: 131545.
Ibm Api Connect 5.0.6.1
Ibm Api Connect 5.0.6.2
Ibm Api Connect 5.0.6.3
Ibm Api Connect 5.0.6.4
Ibm Api Connect 5.0.4.0
Ibm Api Connect 5.0.6.0
Ibm Api Connect 5.0.7.0
Ibm Api Connect 5.0.7.2
Ibm Api Connect 5.0.0.0
Ibm Api Connect 5.0.0.1
Ibm Api Connect 5.0.1.0
Ibm Api Connect 5.0.2.0
Ibm Api Connect 5.0.3.0
Ibm Api Connect 5.0.5.0
Ibm Api Connect 5.0.7.1
5.9
CVSSv3
CVE-2017-1386
IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques. IBM X-Force ID: 127160.
Ibm Api Connect 5.0.2.0
Ibm Api Connect 5.0.4.0
Ibm Api Connect 5.0.0.0
Ibm Api Connect 5.0.0.1
Ibm Api Connect 5.0.1.0
Ibm Api Connect 5.0.6.0
Ibm Api Connect 5.0.6.1
Ibm Api Connect 5.0.6.2
Ibm Api Connect 5.0.7.0
Ibm Api Connect 5.0.3.0
Ibm Api Connect 5.0.5.0
Ibm Api Management 4.0.0.1
Ibm Api Management 4.0.4.1
Ibm Api Management 4.0.4.0
Ibm Api Management 4.0.2.0
Ibm Api Management 4.0.0.0
Ibm Api Management 4.0.4.2
Ibm Api Management 4.0.4.3
Ibm Api Management 4.0.4.4
Ibm Api Management 4.0.4.5
Ibm Api Management 4.0.2.1
Ibm Api Management 4.0.3.0
5.4
CVSSv3
CVE-2018-1382
IBM API Connect 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138079.
Ibm Api Connect 5.0.7.2
Ibm Api Connect 5.0.8.1
Ibm Api Connect 5.0.7.0
Ibm Api Connect 5.0.8.0
Ibm Api Connect 5.0.7.1
Ibm Api Connect
9.8
CVSSv3
CVE-2018-1784
IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework. IBM X-Force ID: 148807.
Ibm Api Connect
9.8
CVSSv3
CVE-2021-29772
IBM API Connect 5.0.0.0 up to and including 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input. IBM X-Force ID: 202774.
Ibm Api Connect
4.6
CVSSv3
CVE-2018-1874
IBM API Connect 5.0.0.0 up to and including 5.0.8.5 could display highly sensitive information to an attacker with physical access to the system. IBM X-Force ID: 151636.
Ibm Api Connect
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304
CVE-2024-4240
arbitrary
CVE-2024-31601
XSS
CVE-2023-20198
CVE-2024-4256
CVE-2024-3342
encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
NEXT »