CVE record · 1 source
CVE-2026-17355
CVSS 8.2IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information from internal network resources…
- Vendor
- IBM
- Product
- API Connect
- CVSS v3.1
- 8.2 AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
- Weakness
- CWE-918
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information from internal network resources…
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information from internal network resources due to server-side request forgery. Destination checks on outbound requests can…