CVE-2026-17319 | BDVDB-2026-401443 Detail
IBMAPI Connect
Description#
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to modify tool configuration and cause a denial of service due to improper authorization. Information supplied by the client is relied on when deciding what a user is allowed to do, which could allow unauthorized changes that disrupt service.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact high, availability impact low. Attack vector: adjacent.
Weaknesses#
- CWE-862 Missing Authorization
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.