Back to CVE List

CVE-2026-9074

CRITICAL SEVERITY

CVSS Score & Metrics

Base Score
9.1 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vulnerability Description

IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functionality.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-89
Source
NVD

External References

Discussion (0)

Add Comment

No comments yet. Be the first!