Api Management

api_management

Vendor: Ibm • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-1386 1Ibm 2Api Connect Api Management May 13, 2026 Jul 31, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques. IBM X-Force ID: 127160.
CVE-2015-0149 1Ibm 1Api Management May 6, 2026 Mar 18, 2015 N/A· v4 N/A· v3 5.5 MEDIUM· v2 The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and private APIs, which allows remote authenticated users to obtain sensitive information or modify data via u...Show more The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and private APIs, which allows remote authenticated users to obtain sensitive information or modify data via unspecified API calls.Show less
CVE-2014-6172 1Ibm 1Api Management May 6, 2026 Jan 21, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IBM API Management 3.0 before 3.0.4.0 IF1 allows remote attackers to obtain sensitive analytics information in an encrypted form via unspecified vectors.
CVE-2014-6133 1Ibm 1Api Management May 6, 2026 Oct 26, 2014 N/A· v4 N/A· v3 2.1 LOW· v2 IBM API Management 3.x before 3.0.1.0 allows local users to obtain sensitive ciphertext information via unspecified vectors.
CVE-2014-3036 1Ibm 1Api Management May 6, 2026 Jun 8, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unkno...Show more Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors.Show less
CVE-2013-0559 1Ibm 1Api Management Apr 29, 2026 Jul 19, 2013 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via unknown vectors.