IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a server-side request forgery (SSRF) vulnerability that allows a remote attacker to bypass restrictions on outbound requests. This could enable the attacker to make the server contact unintended destinations and obtain sensitive information from the responses.