CVE-2018-1712

IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery

High · published August 16, 2018

CVSS v3.0
8.6
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network. IBM X-Force ID: 146370.

The record
Technical detail
CVSS v3.0
8.6 · HIGH
Vector
CVSS:3.0/A:L/AC:L/AV:N/C:H/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00713 · 53.1th percentile
Published
2018-08-16T19:00Z
EPSS history
Timeline
  • 16 AUG 19:00Z
    IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery
    cvelistv5