Threats tagged 'ghsa-hhhf-qrgj-x9pm'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-17291IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker High8.72026-11-07GCVE DatabaseCVE-2026-17291 IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain an open redirect vulnerability. This flaw allows a remote authenticated attacker to manipulate the OAuth 2.0 sign-in redirect address, which is insufficiently validated. As a result, authentication results could be redirected to an attacker-controlled location, enabling account takeover. Report on CVE-2026-17291 Vulnerability CWE-601 #ghsa-hhhf-qrgj-x9pm	GCVE Database	2026-11-07

Page 1 of 1