Svi - CERT CVE

Rezultati pretraživanja za 'Od datuma: 01.11.2026.'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-17231 5.8 IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to an observable response discrepancy. 2026-11-07 05:18:31
CVE-2026-17230 5.4 IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability. 2026-11-07 05:18:31
CVE-2026-17228 8.5 IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Destination restrictions on outbound requests can be bypassed, which could allow the server to r 2026-11-07 05:18:31
CVE-2026-17225 5.4 IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to bypass security restrictions and access unauthorized analytics queries due to improper input validation. Request parameters are no 2026-11-07 05:18:31
CVE-2026-17214 4.8 IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to bypass security restrictions due to LDAP injection. 2026-11-07 05:18:30
CVE-2026-17190 8.7 IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary JavaScript due to cross-site scripting. HTML content supplied by a provider is not sufficiently sanitized before 2026-11-07 05:18:29
CVE-2026-17188 8.5 IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. When service definitions are imported, references to external resources are not sufficiently res 2026-11-07 05:18:29
CVE-2026-17187 8.5 IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-supplied URLs. 2026-11-07 05:18:29
CVE-2026-17172 8.5 IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication. Information supplied by the client is not sufficiently verified, whic 2026-11-07 05:18:29
CVE-2026-17167 4.3 IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to falsify audit log information due to reliance on untrusted inputs. Information supplied by the client is relied on when recording the source of a request, so aud 2026-11-07 05:18:29
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/108
Zapisa po stranici: