CVE-2023-28522

IBM API Connect V10 could allow an authenticated user to perform actions that they should not have access to. IBM X-Force ID: 250585.

• CWE-732

• https://exchange.xforce.ibmcloud.com/vulnerabilities/250585VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6965612Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/250585VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6965612Patch, Vendor Advisory

Published

May 12, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28512IBM Watson CP4D Data Stores 4.6.0, 4.6.1, and 4.6.2 could al…5.9
• CVE-2023-28513IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 C…7.5
• CVE-2023-28514IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain …5.5
• CVE-2023-28517IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.…5.4
• CVE-2023-2852Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-28520IBM Planning Analytics Local 2.0 is vulnerable to stored cro…5.4
• CVE-2023-28523 IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vul…7.8
• CVE-2023-28525IBM Engineering Requirements Management 9.7.2.7 is vulnerabl…4.8
• CVE-2023-28526 IBM Informix Dynamic Server 12.10 and 14.10 archecker is vu…5.5
• CVE-2023-28527 IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerab…5.5
• CVE-2023-28528IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privil…7.8
• CVE-2023-28529IBM InfoSphere Information Server 11.7 is vulnerable to stor…5.4