CVE-2017-1555: IBM API Connect

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed to the application plan. IBM X-Force ID: 131545.

Affected products

• IBM API Connect: version 5.0.0.0 only; version 5.0.0.1 only; version 5.0.1.0 only; version 5.0.2.0 only; version 5.0.3.0 only; version 5.0.4.0 only; …

Published 2017-09-25. Last modified 2026-06-17.