Threats tagged 'ghsa-9c4f-25xc-j3qq'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2026-17236IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker Medium6.42026-11-07GCVE DatabaseCVE-2026-17236 IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain an authorization flaw that could allow a remote authenticated attacker to access sensitive information. The vulnerability arises because authorization checks are not enforced when resolving certain organization URLs, potentially exposing data belonging to other organizations. Report on CVE-2026-17236 Vulnerability CWE-639 #ghsa-9c4f-25xc-j3qq	GCVE Database	2026-11-07

Page 1 of 1