Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:api_connect:5.0.8.0:*:*:*:*:*:*:*

part: a version: 5.0.8.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductApi Connect (d20242e5-b5ca-5106-b0de-b20018dc3f63)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1382 vulnerable 2026-06-08 05:11:17.868769 Details available
IBM API Connect 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138079.
Published: 2018-02-07T17:00:00.000Z
Updated: 2024-09-17T01:01:52.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1785 vulnerable 2026-06-08 05:09:23.060797 Details available
IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query parameters to obtain sensitive information. IBM X-Force ID: 136859.
Published: 2018-02-07T17:00:00.000Z
Updated: 2024-09-17T03:02:00.591Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1000232 vulnerable 2026-06-08 05:07:16.920513 Details available
NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable via Custom HTTP header passed by client. This vulnerability appears to have been fixed in 2.3.0.
Published: 2018-09-05T17:00:00.000Z
Updated: 2024-08-06T03:55:27.288Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.