IBM API Connect vulnerabilities
286 published CVEs name IBM API Connect among the affected products.
- Published CVEs
- 286
- Last 12 months
- 211
- Critical
- 52
- Known exploited
- 0
Critical 52High 111Medium 118Low 5Not scored 0
CVEs per yearBy the year they were published
- 20177
- 201818
- 201925
- 20207
- 202114
- 20221
- 20233
- 20251
- 2026210
Newest CVEs
- CVE-2026-18535
IBM API Connect Denial of Service
IBM · API Connect
Critical9.6 - CVE-2026-19124
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Medium6.8 - CVE-2026-17393
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Medium5.1 - CVE-2026-17386
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
High8.1 - CVE-2026-17384
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
High8.5 - CVE-2026-75590
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
High7.2 - CVE-2026-19131
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Medium6.5 - CVE-2026-19129
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Medium6.8 - CVE-2026-19128
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
High7.5 - CVE-2026-19126
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Medium5.9
Most common weaknesses
- CWE-918 Server-side request forgery (SSRF)59
- CWE-639 Authorization bypass through a user-controlled key (IDOR)33
- CWE-200 Exposure of sensitive information19
- CWE-22 Path traversal16
- CWE-79 Cross-site scripting (XSS)14
- CWE-89 SQL injection11
- CWE-287 Improper authentication8
- CWE-20 Improper input validation7
- CWE-352 Cross-site request forgery (CSRF)6
- CWE-290 5