IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a SQL injection vulnerability that allows a remote authenticated attacker to execute arbitrary SQL commands. This vulnerability can lead to full compromise of confidentiality, integrity, and availability of the affected system.