CVE-2018-1774

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-11-09 · updated 2026-06-17
Weakness: CWE-1236

Description

IBM API Connect 5.0.0.0, 5.0.8.4, 2018.1 and 2018.3.6 is vulnerable to CSV injection via the developer portal and analytics that could contain malicious commands that would be executed once opened by an administrator. IBM X-Force ID: 148692.

Affected products

IBM API Connect: from 5.0.0.0 through 5.0.8.4; from 2018.1.0 through 2018.3.6

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/148692
https://www.ibm.com/support/docview.wss?uid=ibm10737867
https://exchange.xforce.ibmcloud.com/vulnerabilities/148692
https://www.ibm.com/support/docview.wss?uid=ibm10737867

Get alerted when CVE-2018-1774 or the next vulnerability affects your stack