7.2Yüksek

CVE-2026-75590Multiple Vulnerabilities in IBM API Connect

IBM API Connect Yayım: (6 gün önce)

Açıklama

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to access internal network resources and obtain sensitive information due to server-side request forgery. A protection that blocks requests to internal addresses can be bypassed, so the server could be made to contact internal services and return part of their responses.

Zayıflık türü (CWE): CWE-918

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
IBM API Connect 12.1.0.0 – ≤ 12.1.1.2

Kaynaklar ve yamalar