# Ibm Api Connect


- [CVE-2019-4202](https://insights.sbomify.com/CVE-2019-4202/): Command injection in API Connect (critical 10.0)
- [CVE-2025-13915](https://insights.sbomify.com/CVE-2025-13915/): Authentication bypass in IBM API Connect (critical 9.8)
- [CVE-2018-1469](https://insights.sbomify.com/CVE-2018-1469/): Command injection in API Connect (critical 9.8)
- [CVE-2026-9074](https://insights.sbomify.com/CVE-2026-9074/): IBM API Connect SQL Injection (critical 9.1)
- [CVE-2019-4008](https://insights.sbomify.com/CVE-2019-4008/): Information disclosure in API Connect (critical 9.0)
- [CVE-2019-4203](https://insights.sbomify.com/CVE-2019-4203/): Server-side request forgery in API Connect (high 8.9)
- [CVE-2018-1774](https://insights.sbomify.com/CVE-2018-1774/): Code injection in API Connect (high 8.9)
- [CVE-2019-4155](https://insights.sbomify.com/CVE-2019-4155/): Privilege escalation in API Connect (high 8.8)
- [CVE-2019-4402](https://insights.sbomify.com/CVE-2019-4402/): Missing authorization in API Connect (high 8.6)
- [CVE-2018-1712](https://insights.sbomify.com/CVE-2018-1712/): Server-side request forgery in API Connect (high 8.6)
- [CVE-2018-1789](https://insights.sbomify.com/CVE-2018-1789/): Server-side request forgery in API Connect (high 8.4)
- [CVE-2019-4437](https://insights.sbomify.com/CVE-2019-4437/): Information disclosure in API Connect (high 8.2)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/api-connect/