Application Programming Interface (API) Vulnerabilities and Risks
• SEI Report
Publisher
Software Engineering Institute
CMU/SEI Report Number
CMU/SEI-2024-SR-004DOI (Digital Object Identifier)
10.1184/R1/25282342Topic or Tag
Abstract
Application programming interfaces (APIs) are increasingly common, and they are often designed and implemented in a way that creates security risks. This report describes 11 common vulnerabilities and 3 risks related to APIs, providing suggestions about how to fix or reduce their impact. Recommendations include using a standard API documentation process, using automated testing, and ensuring the security of the identity and access management system.
Cite This SEI Report
Sconiers-Hasan, M. (2024, June 24). Application Programming Interface (API) Vulnerabilities and Risks. (SEI Report CMU/SEI-2024-SR-004). Retrieved August 19, 2026, from https://doi.org/10.1184/R1/25282342.
@techreport{sconiers-hasan_2024,
author={Sconiers-Hasan, McKinley},
title={Application Programming Interface (API) Vulnerabilities and Risks},
month={Jun},
year={2024},
number={{CMU/SEI-2024-SR-004},
institution={Software Engineering Institute, Carnegie Mellon University},
doi={10.1184/R1/25282342},
url={https://doi.org/10.1184/R1/25282342},
note={Accessed: 2026-Aug-19}
}
Sconiers-Hasan, McKinley. "Application Programming Interface (API) Vulnerabilities and Risks." (CMU/SEI-2024-SR-004). Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, June 24, 2024. https://doi.org/10.1184/R1/25282342.
M. Sconiers-Hasan, "Application Programming Interface (API) Vulnerabilities and Risks," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, SEI Report CMU/SEI-2024-SR-004, 24-Jun-2024 [Online]. Available: https://doi.org/10.1184/R1/25282342. [Accessed: 19-Aug-2026].
Sconiers-Hasan, McKinley. "Application Programming Interface (API) Vulnerabilities and Risks." (SEI Report CMU/SEI-2024-SR-004). Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 24 Jun. 2024. https://doi.org/10.1184/R1/25282342. Accessed 19 Aug. 2026.
Sconiers-Hasan, McKinley. Application Programming Interface (API) Vulnerabilities and Risks. CMU/SEI-2024-SR-004. Software Engineering Institute. 2024. DOI: 10.1184/R1/25282342. https://doi.org/10.1184/R1/25282342