Unscored severity · published Jul 19, 2013
CVE-2013-0559
Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AM
Api Management · Ibm
2.0.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0559
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0559
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1LI77499
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21643847
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/85557
More from Api Management
5.9
CVE-2017-1386
IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle…
–
CVE-2015-0149
The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and private APIs, which allows remote authenticated users to obtain…
–
CVE-2014-6172
IBM API Management 3.0 before 3.0.4.0 IF1 allows remote attackers to obtain sensitive analytics information in an encrypted form via unspecified vectors
–
CVE-2014-6133
IBM API Management 3.x before 3.0.1.0 allows local users to obtain sensitive ciphertext information via unspecified vectors
–
CVE-2014-3036
Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access,…