Known vulnerabilities in MobileFirst Platform

Vendor: IBM Corporation
Software: MobileFirst Platform
Software CPE: cpe:2.3:a:ibm_corporation:mobilefirst_platform:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 68
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MobileFirst Platform MobileFirst Platform is affected by 68 known vulnerabilities: 12 high, 36 medium, 20 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 8.0.0.0-MFPF-IF202501270630 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 133 more
#VU89753 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-39208		 CWE-22 Low
No
No
 8.0.0.0-MFPF-IF202304111626 22.05.2024 SB2024052235
SB2024052256
#VU89752 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2016-15026		 CWE-611 Low
No
No
 8.0.0.0-MFPF-IF202304111626 22.05.2024 SB2024052235
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259		 CWE-918 Medium
No
No
 8.0.0.0-MFPF-IF202404220901 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU86695 - Server-Side Request Forgery (SSRF)
CVE-2024-22243		 CWE-918 Medium
Available
No
 8.0.0.0-MFPF-IF202404220901 21.02.2024 SB2024022140
SB2024030406
SB2024030529
and 45 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 8.0.0.0-MFPF-IF202304111626 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 8.0.0.0-MFPF-IF202304111626 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67517 - Improper Control of Generation of Code ('Code Injection')
CVE-2016-10541		 CWE-94 High
No
No
 8.0.0.0-MFPF-IF202301121031 20.09.2022 SB2018053118
SB2024042406
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 8.0.2022042909, 8.0.2022050611, 8.0.2022050908 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU55498 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-15366		 CWE-94 Medium
No
No
 8.0.0.0-MFPF-IF202301121031 02.08.2021 SB2020071552
SB2021080213
SB2020120120
and 14 more
#VU48792 - Incorrect Default Permissions
CVE-2020-17521		 CWE-276 Low
No
No
 8.0.0.0-MFPF-IF202301121031 06.12.2020 SB2020120601
SB2021012082
SB2021012083
and 31 more
#VU28228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7656		 CWE-79 Medium
No
No
 8.0.0.0-MFPF-IF202304111626 25.05.2020 SB2020052520
SB2020100907
SB2022072056
and 14 more
#VU21707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10735		 CWE-79 Low
No
No
 8.0.0.0-MFPF-IF202304111626 10.10.2019 SB2019010911
SB2019101009
SB2020093090
and 21 more
#VU19282 - Resource exhaustion
CVE-2019-1010266		 CWE-400 Medium
No
No
 8.0.0.0-MFPF-IF202301121031 22.07.2019 SB2019020111
SB2022062806
SB2022101801
and 8 more
#VU18263 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-6708		 CWE-79 Medium
Available
No
 8.0.0.0-MFPF-IF202304111626 15.04.2019 SB2012072101
SB2019100301
SB2020033103
and 15 more
#VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8331		 CWE-79 Low
No
No
 8.0.0.0-MFPF-IF202304111626 14.02.2019 SB2019021412
SB2019031501
SB2019101009
and 28 more
#VU16956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20676		 CWE-79 Low
No
No
 8.0.0.0-MFPF-IF202304111626 13.01.2019 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU16542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20677		 CWE-79 Low
No
No
 8.0.0.0-MFPF-IF202304111626 14.12.2018 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14042		 CWE-79 Low
No
No
 8.0.0.0-MFPF-IF202304111626 18.07.2018 SB2018071803
SB2020093090
SB2020110508
and 22 more
#VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14040		 CWE-79 Low
No
No
 8.0.0.0-MFPF-IF202304111626 17.07.2018 SB2018071803
SB2019031501
SB2020093090
and 24 more


Showing elements 1 - 20 out of 68