| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-17085 | 4.1 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to bypass security restrictions due to improper handling of case sensitivity. An access restriction is not applied consistently to al | 2026-11-07 05:18:24 | 2026-11-07 05:18:24 |
| CVE-2026-17067 | 5.5 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access internal network resources due to server-side request forgery. | 2026-11-07 05:18:24 | 2026-11-07 05:18:23 |
| CVE-2026-17066 | 9.1 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information and modify or delete data belonging to other tenants due to missing authorization. | 2026-11-07 05:18:23 | 2026-11-07 05:18:23 |
| CVE-2026-17062 | 2.7 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to modify internal requests due to improper neutralization of argument delimiters. Special characters in user-supplied input are not | 2026-11-07 05:18:23 | 2026-11-07 05:18:23 |
| CVE-2026-17049 | 9.9 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information and modify arbitrary documents due to authorization bypass through user-controlled keys. | 2026-11-07 05:18:23 | 2026-11-07 05:18:23 |
| CVE-2026-16920 | 9.9 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to bypass security restrictions due to a confused deputy vulnerability. | 2026-11-07 05:18:23 | 2026-11-07 05:18:22 |
| CVE-2026-16918 | 9.3 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to access internal network resources due to server-side request forgery. | 2026-11-07 05:18:22 | 2026-11-07 05:18:22 |
| CVE-2026-16912 | 8.5 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. | 2026-11-07 05:18:22 | 2026-11-07 05:18:22 |
| CVE-2026-16884 | 9.9 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to an XML external entity (XXE) injection. | 2026-11-07 05:18:22 | 2026-11-07 05:18:22 |
| CVE-2026-16880 | 8.5 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to path traversal. | 2026-11-07 05:18:22 | 2026-11-07 05:18:22 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: