Vulnerabilities

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated privileged attacker to send unauthorized requests from the system due to…

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated privileged attacker to send unauthorized requests from the system due to server-side request forgery. This could be used to enumerate network resources or to support further attacks.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

IBM

Product

API Connect

CVSS v3.1

3.8 AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Weakness

CWE-918

Exposure class

Web platform

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-19122 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 30
   CVE NVD 3h ago

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to gain unauthorized access due to improper authorization.

   CVSS 8.3 CVE-2026-19121 IBM