CVE-2020-4903: IBM API Connect

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

IBM API Connect V10 and V2018 could allow an attacker who has intercepted a registration invitation link to impersonate the registered user or obtain sensitive information. IBM X-Force ID: 191105.

Affected products

• IBM API Connect: from 10.0.0.0, before 10.0.1.1 (fixed in 10.0.1.1); from 2018.4.1.0, before 2018.4.1.13 (fixed in 2018.4.1.13)

Published 2021-03-08. Last modified 2026-06-17.