Vulnerabilities

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization…

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization via user-controlled keys.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

IBM

Product

API Connect

CVSS v3.1

8.5 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Weakness

CWE-639

Exposure class

Web platform

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-17334 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 30
   CVE NVD 2h ago

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request…

   CVSS 7.7 CVE-2026-17361 IBM
2. 30
   CVE NVD 2h ago

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a local attacker to obtain sensitive information due to the use of a hard-coded cryptographic…

   CVSS 8.7 CVE-2026-17356 IBM
3. 30
   CVE NVD 2h ago

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information from internal network resources…

   CVSS 8.2 CVE-2026-17355 IBM
4. 38
   CVE NVD 2h ago

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information and bypass security…

   CVSS 9.6 CVE-2026-17353 IBM
5. 30
   CVE NVD 2h ago

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request…

   CVSS 8.5 CVE-2026-17352 IBM
6. 38
   CVE NVD 2h ago

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery.

   CVSS 9.3 CVE-2026-17344 IBM
7. 38
   CVE NVD 2h ago

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level…

   CVSS 9.1 CVE-2026-17338 IBM
8. 30
   CVE NVD 2h ago

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request…

   CVSS 8.5 CVE-2026-17330 IBM
9. 38
   CVE NVD 2h ago

   IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to improper validation of endpoint URLs.

   CVSS 9.3 CVE-2026-17329 IBM
10. 30
    CVE NVD 2h ago

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper input…

    CVSS 8.5 CVE-2026-17328 IBM
11. 30
    CVE NVD 2h ago

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request…

    CVSS 8.5 CVE-2026-17327 IBM
12. 30
    CVE NVD 2h ago

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of…

    CVSS 8.5 CVE-2026-17325 IBM
13. 30
    CVE NVD 2h ago

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to XML external entity (XXE) injection.

    CVSS 8.2 CVE-2026-17323 IBM
14. 30
    CVE NVD 2h ago

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to an insecure direct…

    CVSS 7.7 CVE-2026-17320 IBM
15. 30
    CVE NVD 2h ago

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to perform server-side request forgery due to improper validation of…

    CVSS 7.2 CVE-2026-17316 IBM
16. 23
    CVE NVD 2h ago

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to improper validation of user-supplied…

    CVSS 5.8 CVE-2026-17315 IBM
17. 23
    CVE NVD 2h ago

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request…

    CVSS 5.0 CVE-2026-17314 IBM
18. 38
    CVE NVD 2h ago

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and take control of gateway configuration due…

    CVSS 9.8 CVE-2026-17313 IBM
19. 23
    CVE NVD 2h ago

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to the use of a hard-coded cryptographic…

    CVSS 6.5 CVE-2026-17310 IBM
20. 30
    CVE NVD 2h ago

    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and tamper with configuration due to improper…

    CVSS 8.0 CVE-2026-17309 IBM