CVE-2017-1161

Severity: high (CVSS 7.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-04-17 · updated 2026-06-17
Weakness: CWE-20

Description

IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer Portal. By crafting a malicious URL, an attacker could exploit this vulnerability to execute arbitrary commands on the system with the privileges of the www-data user. IBM X-Force ID: 122956.

Affected products

IBM API Connect: 5.0.6.0

References

http://www.ibm.com/support/docview.wss?uid=swg22000316
http://www.securityfocus.com/bid/97665
http://www.ibm.com/support/docview.wss?uid=swg22000316
http://www.securityfocus.com/bid/97665

Get alerted when CVE-2017-1161 or the next vulnerability affects your stack