CVE-2018-2009: IBM API Connect

Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.

IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs, including email id/names, etc. IBM X-Force ID: 155148.

Affected products

• IBM API Connect: from 2018.1.0, up to and including 2018.4.1.0

Published 2019-03-11. Last modified 2026-06-17.