Threats tagged 'ghsa-xp63-4gpf-4435'

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a vulnerability that could allow arbitrary code execution by the management service in certain non-default configurations. This occurs due to improper control over code generation where customization content may be evaluated as code if the related feature is enabled and not properly restricted. The vulnerability has a high severity rating with a CVSS score of 7.5.