9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.
AI Analysis
Authentication bypass vulnerability in IBM API Connect
Basic Information
ID
CVE-2025-13915
Source
ibm
Published
Dec 26, 2025 at 13:16
Modified
Dec 26, 2025 at 14:40
Affected Product
Vendor
IBM
Product
API Connect
Version
10.0.8.0
Affected Versions
IBM API Connect 10.0.8.0
IBM API Connect 10.0.11.0
IBM API Connect 10.0.11.0
CWE Classification
AI Assessment
AI Score
9.8 / 10
AI Severity
Critical
Vendor
IBM
Product
API Connect
Version
10.0.8.0, 10.0.8.1, 10.0.8.2, 10.0.8.3, 10.0.8.4, 10.0.8.5, 10.0.11.0