CVE-2018-1784

IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework

High · published December 20, 2018

CVSS v3.0
7.1
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework. IBM X-Force ID: 148807.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/A:N/AC:L/AV:N/C:H/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.01728 · 77.4th percentile
Published
2018-12-20T14:00Z
EPSS history
Timeline
  • 20 DEC 14:00Z
    IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework
    cvelistv5