Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2018-1712

IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially…

High8.6EPSS 0.71%
Published
Updated
Reserved
Assigned by
ibm

Description

IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network. IBM X-Force ID: 146370.

Scores

CVSS scores of CVE-2018-1712, by who scored it
Scored byCVSSScoreVector
ibmCNA (assigner)3.0High8.6CVSS:3.0/A:L/AC:L/AV:N/C:H/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O
NVDNVD · Modified3.0Critical9.9CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L
EPSS (exploitation in 30 days)
0.71% · top 46% of all CVEs (4 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.6.

Weakness

Affected products

  • IBM · API Connect

    • affected 5.0.1.0
    • affected 5.0.0.0
    • affected 5.0.0.1
    • affected 5.0.2.0
    • affected 5.0.5.0
    • affected 5.0.6.0
    • affected 5.0.6.1
    • affected 5.0.6.2
    • affected 5.0.7.0
    • affected 5.0.7.1
    • affected 5.0.3.0
    • affected 5.0.4.0
    • affected 5.0.7.2
    • affected 5.0.6.3
    • affected 5.0.6.4
    • affected 5.0.8.0
    • affected 5.0.8.1
    • affected 5.0.6.5
    • affected 5.0.6.6
    • affected 5.0.8.2
    • affected 5.0.8.3

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2018-1712 badge
[![CVE-2018-1712](https://trackcve.app/badge/CVE-2018-1712.svg)](https://trackcve.app/cve/CVE-2018-1712)

Record last updated .