| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-17143 | 4.3 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform HTML injection due to improper neutralization of user-supplied input. | 2026-11-07 05:18:27 | 2026-11-07 05:18:27 |
| CVE-2026-17140 | 3.3 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. Input supplied by a user can influence code generated by the | 2026-11-07 05:18:27 | 2026-11-07 05:18:27 |
| CVE-2026-17139 | 5.4 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting. Certain URL fields are not sufficiently validated, so malicious script cont | 2026-11-07 05:18:27 | 2026-11-07 05:18:27 |
| CVE-2026-17134 | 9.9 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. | 2026-11-07 05:18:26 | 2026-11-07 05:18:26 |
| CVE-2026-17132 | 9.9 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command. | 2026-11-07 05:18:26 | 2026-11-07 05:18:26 |
| CVE-2026-17131 | 9.3 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. Restrictions on outbound requests can be bypassed, so the server could be made to contact unintended destinati | 2026-11-07 05:18:26 | 2026-11-07 05:18:26 |
| CVE-2026-17129 | 7.6 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information and cause a denial of service due to an insecure direct object reference. | 2026-11-07 05:18:26 | 2026-11-07 05:18:26 |
| CVE-2026-17117 | 9.9 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improperly controlled modification of object attributes. A user could set a field that should only b | 2026-11-07 05:18:25 | 2026-11-07 05:18:25 |
| CVE-2026-17114 | 5.4 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information and cause a denial of service due to the generation of error messages containing sensitive informatio | 2026-11-07 05:18:25 | 2026-11-07 05:18:25 |
| CVE-2026-17108 | 8.5 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. | 2026-11-07 05:18:24 | 2026-11-07 05:18:24 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: