| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-17281 | 7.7 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. | 2026-11-08 02:17:00 | 2026-11-07 05:18:34 |
| CVE-2026-17279 | 7.7 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption. Certain requests can cause internal processing to stall, which | 2026-11-08 02:17:00 | 2026-11-07 05:18:33 |
| CVE-2026-17241 | 6.5 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. | 2026-11-08 02:17:00 | 2026-11-07 05:18:33 |
| CVE-2026-17215 | 4.3 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to verbose error messages. Error responses contain more information about the system than necessa | 2026-11-08 02:16:59 | 2026-11-07 05:18:30 |
| CVE-2026-17211 | 4.3 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to cause a denial of service due to incorrect type conversion. A value is converted incorrectly between two different types, which co | 2026-11-08 02:16:59 | 2026-11-07 05:18:30 |
| CVE-2026-17202 | 5.3 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to enumerate usernames due to observable differences in response behavior. | 2026-11-08 02:16:59 | 2026-11-07 05:18:30 |
| CVE-2026-17144 | 4.3 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation. | 2026-11-08 02:16:59 | 2026-11-07 05:18:27 |
| CVE-2026-17137 | 4.0 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a local attacker to obtain sensitive information due to improper use of cryptography. The encryption applied to stored data is not implemented with sufficient strength, which weakens its protectio | 2026-11-08 02:16:59 | 2026-11-07 05:18:26 |
| CVE-2026-17128 | 6.8 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to the insertion of sensitive information into log files. | 2026-11-08 02:16:59 | 2026-11-07 05:18:25 |
| CVE-2026-17112 | 7.7 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information belonging to other tenants due to broken object-level authorization. | 2026-11-08 02:16:59 | 2026-11-07 05:18:25 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39927
Zapisa po stranici: