Vulnerability Details CVE-2026-17304
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation. Locations supplied when service definitions are imported are not sufficiently validated, which could allow the server to retrieve content it should not access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 24.6%
CVSS Severity
CVSS v3 Score 6.4
Products affected by CVE-2026-17304
-
cpe:2.3:a:ibm:api_connect:12.1.0.0
-
cpe:2.3:a:ibm:api_connect:12.1.1.0