Evidence-linked product lifecycle intelligenceSUPPORT · SECURITY · RETIREMENT
← Search results
CVE-LINKED INVENTORY79 SECURITY RECORDS

IBM Corporation

API Connect

Affected and fixed version statements observed in the public BlackTree CVE catalogue. These statements describe vulnerability scope, not publisher support entitlement.

Lifecycle evidence status

This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.

A missing support date does not mean the product is supported. CVE publication dates and affected-version ranges must not be interpreted as EOL dates.

CVE-observed version history

CVEPublishedAffected versionsFixed version informationPublisher evidence
CVE-2026-9074 8 Jul 2026 10.0.8.0 < 10.0.8.9; 12.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-3144 8 Jul 2026 12.1.0.0 < 12.1.0.3 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2025-13915 26 Dec 2025 API Connect: 10.0.8.0 ≤ 10.0.8.5, 10.0.11.0 IBM strongly recommends addressing the vulnerability now by upgrading.; Product(s)Affected Version RangeRemediated VersionInstructions / DownloadIBM API Connect V10.0.810.0.8.0 – 10.0.8.5iFix; Instructions:; https://www.ibm.com/support/pages/node/7255318; 10.0.8.1: https://ibm.biz/BdbtC6; 10.0.8.2-ifix1: https://ibm.biz/BdbtCN; 10.0.8.2-ifix2: https://ibm.biz/BdbtC7; 10.0.8.3: https://ibm.biz/BdbtCW; 10.0.8.4: https://ibm.biz/BdbtQc; 10.0.8.5: https://ibm.biz/BdbtQB; IBM API Connect V10.010.0.11iFix https://ibm.biz/BdbtCw Update reference ↗
CVE-2023-47722 9 Dec 2023 V10.0.5.3, V10.0.6.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2023-28522 12 May 2023 10.0.0.0 < 10.0.5.1; 10.0.1.4 < 10.0.1.9 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2022-34350 8 Feb 2023 10.0.0.0 < 10.0.5.0; 10.0.1.0 < 10.0.1.7; 2018.4.1.0 < 2018.4.1.20 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2021-38997 1 Dec 2022 10.0.0.0 < 10.0.5.0; 10.0.1.0 < 10.0.1.7; 2018.4.1.0 < 2018.4.1.19 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2021-29772 26 Aug 2021 5.0.0.0; 5.0.8.11 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2021-29715 26 Aug 2021 5.0.0.0; 5.0.8.11 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2020-4706 17 Aug 2021 5.0.0.0; 5.0.8.10 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2020-4707 4 Aug 2021 5.0.0.0; 5.0.8.11 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2021-20440 15 Mar 2021 2018.4.1.0; 2018.4.1.13; 10.0.0.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2020-4903 8 Mar 2021 2018.4.1.0; 2018.4.1.13; 10.0.0.0; 10.0.1.1 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2020-4695 8 Mar 2021 10.0.0.0; 10.0.1.0 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2020-4828 4 Feb 2021 2018.4.1.0; 2018.4.1.13; 10.0.0.0; 10.0.1.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2020-4827 4 Feb 2021 2018.4.1.0; 2018.4.1.13; 10.0.0.0; 10.0.1.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2020-4826 4 Feb 2021 2018.4.1.0; 2018.4.1.13; 10.0.0.0; 10.0.1.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2020-4825 4 Feb 2021 2018.4.1.0; 2018.4.1.13; 10.0.0.0; 10.0.1.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2020-4640 4 Feb 2021 2018.4.1.0; 2018.4.1.13; 10.0.0.0; 10.0.1.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2020-4838 12 Jan 2021 5.0.0.0; 5.0.8.10 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2020-4899 5 Jan 2021 5.0.0.0; 5.0.8.8 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2020-4638 3 Sep 2020 2018.4.1.0; 2018.4.12 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2020-4337 3 Sep 2020 2018.4.1.0; 2018.4.1.12 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2020-4452 29 Jun 2020 2018.4.1.0; 2018.4.1.11 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2020-4251 12 Jun 2020 5.0.0.0; 5.0.8.8 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2020-4346 12 May 2020 2018.4.1.0; 2018.4.1.10 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2020-4195 12 May 2020 2018.4.1.0; 2018.4.1.10 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2019-4553 24 Mar 2020 5.0.0.0; 5.0.8.7iFix3 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2019-4609 18 Dec 2019 2018.4.1.7 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2019-4444 16 Dec 2019 2018.4.1.0; 2018.4.1.7 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2019-4600 28 Oct 2019 5.0.0.0; 5.0.8.7 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2019-4437 20 Aug 2019 2018.1; 2018.4.1.6 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2019-4460 20 Aug 2019 5.0.0.0; 5.0.8.6 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2019-4402 20 Aug 2019 2018.1; 2018.4.1.6 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2019-4382 25 Jun 2019 5.0.0.0; 5.0.8.6 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2018-2013 25 Jun 2019 2018.1; 2018.4.1.5 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2018-2011 25 Jun 2019 2018.1; 2018.4.1.5 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2018-1858 25 Jun 2019 5.0.0.0; 5.0.8.6 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2019-4256 29 May 2019 5.0.0.0; 5.0.8.6 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2018-1991 22 May 2019 5.0.0.0; 5.0.8.6 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2018-2015 2 May 2019 2018.1; 2018.4.1.4 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2018-2007 29 Apr 2019 2018.1; 2018.4.1.2 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2019-4203 15 Apr 2019 5.0.0.0; 5.0.8.6 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2019-4202 15 Apr 2019 5.0.0.0; 5.0.8.6 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2019-4155 8 Apr 2019 2018.1; 2018.4.1.3 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2019-4051 8 Apr 2019 2018.1; 2018.4.1.3 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2018-1874 2 Apr 2019 5.0.0.0; 5.0.8.5 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2019-4052 22 Mar 2019 2018.1; 2018.4.1.2 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2018-2009 11 Mar 2019 2018.1; 2018.4.1 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2019-4008 7 Feb 2019 2018.1; 2018.4.1.1 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗

How this record is maintained

The CVE inventory is reconciled automatically from cve.blacktree.nl. Exact identity matches link to existing Lifecycle product or package histories. Unmatched products stay in a prioritised publisher-source research queue, and Lifecycle marks the date gap instead of inferring a support boundary from vulnerability data.