api_connect vulnerabilities

CVEs whose affected-version data names the api_connect package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-13915Critical· 9.8

IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.

IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.

▾ Midnightibm · api_connectEPSS 9.0%via NVD

api_connect vulnerabilities (CVEs) · VulnSea