CVE-2018-1712

Severity: critical (CVSS 9.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-08-16 · updated 2026-06-17
Weakness: CWE-352

Description

IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network. IBM X-Force ID: 146370.

Affected products

IBM API Connect: from 5.0.0.0 through 5.0.8.3

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/146370
https://www-01.ibm.com/support/docview.wss?uid=ibm10716169
https://exchange.xforce.ibmcloud.com/vulnerabilities/146370
https://www-01.ibm.com/support/docview.wss?uid=ibm10716169

Get alerted when CVE-2018-1712 or the next vulnerability affects your stack