GCVE - cpe:2.3:a:ibm:api_connect:5.0.7.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:api_connect:5.0.7.2:*:*:*:*:*:*:*

part: a version: 5.0.7.2 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Api Connect (`d20242e5-b5ca-5106-b0de-b20018dc3f63`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-1382`	vulnerable	2026-06-08 05:11:17.868292	Details available IBM API Connect 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138079. Published: 2018-02-07T17:00:00.000Z Updated: 2024-09-17T01:01:52.633Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/138079 http://www.ibm.com/support/docview.wss?uid=swg22013054	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1785`	vulnerable	2026-06-08 05:09:23.057954	Details available IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query parameters to obtain sensitive information. IBM X-Force ID: 136859. Published: 2018-02-07T17:00:00.000Z Updated: 2024-09-17T03:02:00.591Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/136859 http://www.ibm.com/support/docview.wss?uid=swg22013061	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1556`	vulnerable	2026-06-08 05:09:22.588871	Details available IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that could allow an authenticated attacker to use a regex and cause the system to slow or hang. IBM X-Force ID: 131546. Published: 2017-09-13T18:00:00.000Z Updated: 2024-09-17T01:51:42.744Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/100831 http://www.ibm.com/support/docview.wss?uid=swg22008315 https://exchange.xforce.ibmcloud.com/vulnerabilities/131546	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1555`	vulnerable	2026-06-08 05:09:22.588519	Details available IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed to the application plan. IBM X-Force ID: 131545. Published: 2017-09-25T16:00:00.000Z Updated: 2024-09-16T22:01:43.970Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/131545 http://www.ibm.com/support/docview.wss?uid=swg22008588 http://www.securityfocus.com/bid/100973	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1551`	vulnerable	2026-06-08 05:09:22.585542	Details available IBM API Connect 5.0.0.0 through 5.0.7.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 131291. Published: 2017-09-25T16:00:00.000Z Updated: 2024-09-16T17:33:11.900Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg22008372 https://exchange.xforce.ibmcloud.com/vulnerabilities/131291	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.