Vulnerability Details CVE-2026-17137
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a local attacker to obtain sensitive information due to improper use of cryptography. The encryption applied to stored data is not implemented with sufficient strength, which weakens its protection.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 0.8%
CVSS Severity
CVSS v3 Score 4.0
Products affected by CVE-2026-17137
-
cpe:2.3:a:ibm:api_connect:12.1.0.0
-
cpe:2.3:a:ibm:api_connect:12.1.1.0