Veille CVE

Recherche « Google Cloud Apigee »

2 CVE

  1. CVE-2026-12879 5.9 Moyenne

    Google Cloud Apigee

    An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-tenant data. This vulnerability was patched on 12 June 2026 on the Apigee Servers, and no customer action is needed.

  2. CVE-2026-2264 9.2 Critique

    Google Cloud Apigee-X

    A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For successful exploitation, an administrator must initially establish an insecure configuration of the API proxy.