IBM API Connect 5.0.8.9

CPE Details

IBM API Connect 5.0.8.9
ibm
api_connect
5.0.8.9
2021-01-07
15h02 +00:00
2021-01-07
15h02 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ibm:api_connect:5.0.8.9:*:*:*:*:*:*:*

Informations

Vendor

ibm

Product

api_connect

Version

5.0.8.9

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-29772 2021-08-26 19h25 +00:00 IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input. IBM X-Force ID: 202774.
9.8
Critical
CVE-2021-29715 2021-08-26 19h25 +00:00 IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive information or conduct denial of serivce attacks due to open ports. IBM X-Force ID: 201018.
9.1
Critical
CVE-2020-4706 2021-08-17 13h55 +00:00 IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 187194.
5.4
Medium
CVE-2020-4707 2021-08-04 14h00 +00:00 IBM API Connect 5.0.0.0 through 5.0.8.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 187370.
5.4
Medium
CVE-2020-4838 2021-01-12 14h45 +00:00 IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190036.
5.4
Medium
CVE-2020-4899 2021-01-05 15h10 +00:00 IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due to plain text transmission of sensitive information across the network. IBM X-Force ID: 190990.
9.1
Critical
CVE-2019-4553 2020-03-24 15h20 +00:00 IBM API Connect V5.0.0.0 through 5.0.8.7iFix3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 165958.
7.5
High