GHSA-2p7h-r5c3-64qmHighCVSS 7.6

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an...

Published
November 7, 2026
Last Modified
November 7, 2026

🔗 CVE IDs covered (1)

📋 Description

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized before it is used in database queries.

🔗 References (4)