Security Advisory

CVE-2018-1712

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-08-16 19:00:00

Last updated 2024-09-16 23:26:46

Assigner ibm

CVSS score 8.6

State PUBLISHED

Description

IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network. IBM X-Force ID: 146370.

← Browse all CVEs View on cve.org ↗