CVE-2018-1784

HIGH

IBM API Connect 5.0.0.0-5.0.8.4 - NoSQL Injection in MongoDB Connector

Title source: llm

IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework. IBM X-Force ID: 148807.

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

Vendor Advisory x_refsource_confirm

Patch, VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

CVSS v3 7.1

EPSS 0.0173

EPSS Percentile 75.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Status published

Products (1)

ibm/api_connect 5.0.0.0 - 5.0.8.4

Published Dec 20, 2018

Tracked Since Feb 18, 2026