| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-17373 | 7.7 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. | 2026-11-08 02:17:02 | 2026-11-07 05:18:50 |
| CVE-2026-17371 | 5.0 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. | 2026-11-08 02:17:02 | 2026-11-07 05:18:50 |
| CVE-2026-17368 | 6.8 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform network reconnaissance and obtain sensitive credentials due to server-side request forgery. The server can be made to send | 2026-11-08 02:17:02 | 2026-11-07 05:18:49 |
| CVE-2026-17366 | 5.0 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. | 2026-11-08 02:17:02 | 2026-11-07 05:18:49 |
| CVE-2026-17363 | 7.7 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection. | 2026-11-08 02:17:02 | 2026-11-07 05:18:48 |
| CVE-2026-17361 | 7.7 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. | 2026-11-08 02:17:02 | 2026-11-07 05:18:48 |
| CVE-2026-17345 | 7.7 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command. | 2026-11-08 02:17:02 | 2026-11-07 05:18:46 |
| CVE-2026-17331 | 7.5 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to read arbitrary files on the server due to external control of a file name or path. | 2026-11-08 02:17:02 | 2026-11-07 05:18:43 |
| CVE-2026-17323 | 8.2 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to XML external entity (XXE) injection. | 2026-11-08 02:17:01 | 2026-11-07 05:18:42 |
| CVE-2026-17320 | 7.7 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to an insecure direct object reference. | 2026-11-08 02:17:01 | 2026-11-07 05:18:41 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39927
Zapisa po stranici: