CVE-2018-1789

IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a server side request forgery attack

High · published September 7, 2018

CVSS v3.0
8.4
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a server side request forgery attack. IBM X-Force ID: 148939.

The record
Technical detail
CVSS v3.0
8.4 · HIGH
Vector
CVSS:3.0/A:L/AC:H/AV:N/C:H/I:H/PR:L/S:C/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.01231 · 68.5th percentile
Published
2018-09-07T16:00Z
EPSS history
Timeline
  • 07 SEP 16:00Z
    IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a server side request forgery attack
    cvelistv5