GCVE - cpe:2.3:a:ibm:api_connect:5.0.4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:api_connect:5.0.4.0:*:*:*:*:*:*:*

part: a version: 5.0.4.0 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Api Connect (`d20242e5-b5ca-5106-b0de-b20018dc3f63`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-1555`	vulnerable	2026-06-08 05:09:22.588365	Details available IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed to the application plan. IBM X-Force ID: 131545. Published: 2017-09-25T16:00:00.000Z Updated: 2024-09-16T22:01:43.970Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/131545 http://www.ibm.com/support/docview.wss?uid=swg22008588 http://www.securityfocus.com/bid/100973	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1551`	vulnerable	2026-06-08 05:09:22.581607	Details available IBM API Connect 5.0.0.0 through 5.0.7.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 131291. Published: 2017-09-25T16:00:00.000Z Updated: 2024-09-16T17:33:11.900Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg22008372 https://exchange.xforce.ibmcloud.com/vulnerabilities/131291	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1386`	vulnerable	2026-06-08 05:09:21.988107	Details available IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques. IBM X-Force ID: 127160. Published: 2017-07-31T21:00:00.000Z Updated: 2024-09-17T03:38:28.779Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/127160 http://www.securityfocus.com/bid/100008 http://www.ibm.com/support/docview.wss?uid=swg22004981	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1379`	vulnerable	2026-06-08 05:09:21.977272	Details available IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by improper handling of requests to the Developer Portal. IBM X-Force ID: 127002. Published: 2017-06-15T13:00:00.000Z Updated: 2024-08-05T13:32:29.458Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/99063 https://exchange.xforce.ibmcloud.com/vulnerabilities/127002 http://www.ibm.com/support/docview.wss?uid=swg22004714	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1328`	vulnerable	2026-06-08 05:09:21.779709	Details available IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by improper handling of security policy. By crafting a suitable request, an attacker could exploit this vulnerability to bypass security and use the vulnerable API. IBM X-Force ID: 126230. Published: 2017-06-27T16:00:00.000Z Updated: 2024-08-05T13:32:29.354Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/126230 http://www.ibm.com/support/docview.wss?uid=swg22003867 http://www.securityfocus.com/bid/99267	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1322`	vulnerable	2026-06-08 05:09:21.766918	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.