IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functionality.Referenceshttps://www.ibm.com/support/pages/node/7278909https://www.ibm.com/support/pages/node/7278218
