Login Request a demo
AC
Product
API Connect
by IBM · last CVE Jul 8, 2026
81
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities81In the news0Timeline
Severity mix
Critical 14High 22Medium 44Low 1
Severity
All severities81Critical14High22Medium44Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add API Connect to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-4202
10.0
4%
Apr 15
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection
Affected: 5.0.0.0 through 5.0.8.6
CVE-2018-1789
9.9
1%
Sep 7
IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a server side request forgery attack
Affected: 2018.1.0 through 2018.3.4
CVE-2018-1712
9.9
1%
Aug 16
IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery
Affected: 5.0.1.0; 5.0.0.0; 5.0.0.1; 5.0.2.0; 5.0.5.0; 5.0.6.0; +15 more
CVE-2026-9074
9.8
1%
Jul 8
IBM API Connect SQL Injection
Affected: 10.0.8.0 before 10.0.8.9; 12.0
CVE-2026-3144
9.8
0%
Jul 8
IBM API Connect Default Credentials
Affected: 12.1.0.0 before 12.1.0.3
CVE-2025-13915
9.8
9%
Dec 26
Authentication bypass in IBM API Connect
Affected: 10.0.8.0 through 10.0.8.5; 10.0.11.0
CVE-2021-29772
9.8
1%
Aug 26
IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input
Affected: 5.0.0.0 through 5.0.8.11
CVE-2019-4203
9.8
2%
Apr 15
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks
Affected: 5.0.0.0 through 5.0.8.6
CVE-2019-4155
9.8
3%
Apr 8
IBM API Connect's Developer Portal 2018.1 and 2018.4.1.3 is impacted by a privilege escalation vulnerability when integrated with an OpenID Connect (OIDC) user registry
Affected: 2018.1.0 through 2018.4.1.3
CVE-2019-4008
9.8
2%
Feb 7
API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak
Affected: 2018.1; 2018.4.1.1
CVE-2018-1784
9.8
2%
Dec 20
IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework
Affected: 5.0.0.0 through 5.0.8.4
CVE-2018-1469
9.8
3%
Apr 4
IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker to execute system commands using specially crafted HTTP requests
Affected: 5.0.0.0 through 5.0.6.6; 5.0.7.0 through 5.0.7.2; 5.0.8.0 through 5.0.8.2
CVE-2021-29715
9.1
2%
Aug 26
IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive information or conduct denial of serivce attacks due to open ports
Affected: 5.0.0.0 through 5.0.8.11
CVE-2020-4899
9.1
1%
Jan 5
IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due to plain text transmission of sensitive information across…
Affected: 5.0.0.0 through 5.0.8.10
Showing 14