What’s Vulnerable › Products

IBM API Connect vulnerabilities

81 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your IBM API Connect version is affected

Latest IBM API Connect vulnerabilities

• CVE-2026-9074 — IBM API Connect SQL Injection (CVSS 9.8)
• CVE-2026-3144 — IBM API Connect Default Credentials (CVSS 9.8)
• CVE-2025-13915 — Authentication bypass in IBM API Connect (CVSS 9.8)
• CVE-2023-47722 — IBM API Connect information disclosure (CVSS 5.5)
• CVE-2023-28522 — IBM API Connect improper access control (CVSS 8.8)
• CVE-2022-34350 — IBM API Connect security bypass (CVSS 7.5)
• CVE-2021-38997 — IBM API Connect HOST header injection (CVSS 5.4)
• CVE-2021-29772 — (CVSS 9.8)
• CVE-2021-29715 — (CVSS 9.1)
• CVE-2020-4706 — (CVSS 5.4)
• CVE-2020-4707 — (CVSS 5.4)
• CVE-2021-20440 — (CVSS 4.3)
• CVE-2020-4903 — (CVSS 6.5)
• CVE-2020-4695 — (CVSS 7.5)
• CVE-2020-4828 — (CVSS 6.5)
• CVE-2020-4827 — (CVSS 4.3)
• CVE-2020-4826 — (CVSS 4.3)
• CVE-2020-4825 — (CVSS 5.4)
• CVE-2020-4640 — (CVSS 4.1)
• CVE-2020-4838 — (CVSS 5.4)
• CVE-2020-4899 — (CVSS 9.1)
• CVE-2020-4638 — (CVSS 7.2)
• CVE-2020-4337 — (CVSS 6.5)
• CVE-2020-4452 — (CVSS 7.5)
• CVE-2020-4251 — (CVSS 5.4)