CVE record · 1 source
CVE-2026-19121
CVSS 8.3IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to gain unauthorized access due to improper authorization.
- Vendor
- IBM
- Product
- API Connect
- CVSS v3.1
- 8.3 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
- Weakness
- CWE-290
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to gain unauthorized access due to improper authorization.
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to gain unauthorized access due to improper authorization. Tenant context is not sufficiently verified against the authenticated user, which could…