IBM API Connect vulnerabilities

CVEs per yearBy the year they were published

1. 20188
2. 201915
3. 201928
4. 202117
5. 20224
6. 20232
7. 20231
8. 20251
9. 20262

Newest CVEs

• CVE-2026-9074

  IBM API Connect SQL Injection

  IBM · API Connect

  Critical9.1
• CVE-2026-3144

  IBM API Connect Default Credentials

  IBM · API Connect

  High8.1
• CVE-2025-13915

  Authentication bypass in IBM API Connect

  IBM · API Connect

  Critical9.8
• CVE-2023-47722

  IBM API Connect information disclosure

  IBM · API Connect

  Medium6.2
• CVE-2023-28522

  IBM API Connect improper access control

  IBM · API Connect

  Medium4.3
• CVE-2022-34350

  IBM API Connect security bypass

  IBM · API Connect

  Medium5.3
• CVE-2021-38997

  IBM API Connect HOST header injection

  IBM · API Connect

  Medium5.4
• CVE-2021-29772

  IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input. IBM X-Force ID: 202774.

  IBM · API Connect

  Medium5.6
• CVE-2021-29715

  IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive information or conduct denial of serivce attacks due to open ports. IBM…

  IBM · API Connect

  Medium6.5
• CVE-2020-4706

  IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a…

  IBM · API Connect

  Medium5.4