CVE-2020-4337: IBM API Connect

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server to generate user registration emails that contain malicious URLs. IBM X-Force ID: 177933.

Affected products

• IBM API Connect: from 2018.4.1.0, up to and including 2018.4.1.12

Published 2020-09-03. Last modified 2026-06-17.