Known vulnerabilities in Analytics Content Hub

Vendor: IBM Corporation
Software: Analytics Content Hub
Software CPE: cpe:2.3:a:ibm_corporation:analytics_content_hub:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 20
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Analytics Content Hub Analytics Content Hub is affected by 20 known vulnerabilities: 6 high, 11 medium, 3 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101073 - Information Exposure Through an Error Message
CVE-2024-35134		 CWE-209 Medium
No
No
 2.3 02.12.2024 SB2024120210
#VU101071 - Memory corruption
CVE-2024-39750		 CWE-119 High
No
No
 2.3 02.12.2024 SB2024120210
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 2.3 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU92245 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-33883		 CWE-1321 High
Available
No
 2.3 19.06.2024 SB2024061916
SB2024062871
SB2024072414
and 11 more
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262		 CWE-918 Medium
No
No
 2.3 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU87744 - Out-of-bounds write
CVE-2024-29133		 CWE-787 High
No
No
 2.3 22.03.2024 SB2024032169
SB2024032283
SB20240417122
and 40 more
#VU87706 - Out-of-bounds write
CVE-2024-29131		 CWE-787 High
No
No
 2.3 21.03.2024 SB2024032169
SB2024032283
SB20240417122
and 36 more
#VU84031 - Improper Certificate Validation
CVE-2023-4586		 CWE-295 Medium
No
No
 2.2 08.12.2023 SB2023121105
SB2023121203
SB20231222102
and 15 more
#VU80741 - Improper Certificate Validation
CVE-2012-5783		 CWE-295 Medium
No
No
 2.3 13.09.2023 SB2023091335
SB2023091521
SB2023092013
and 20 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 2.2 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU76601 - Deserialization of Untrusted Data
CVE-2016-1000027		 CWE-502 High
No
No
 2.3 29.05.2023 SB2023052915
SB2023060816
SB2023062703
and 24 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 2.2 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU69545 - Incorrect Default Permissions
CVE-2022-41946		 CWE-276 Low
No
No
 2.2 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU66747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31197		 CWE-89 High
No
No
 2.2 24.08.2022 SB2022082432
SB2022082543
SB2022090901
and 27 more
#VU61043 - Resource Management Errors
CVE-2022-26336		 CWE-399 Medium
No
No
 2.2 07.03.2022 SB2022030703
SB2023012211
SB2023020762
and 6 more
#VU48436 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-25695		 CWE-89 Medium
No
No
 2.3 16.11.2020 SB2020111609
SB2020111711
SB2020111816
and 33 more
#VU48437 - Improper Access Control
CVE-2020-25694		 CWE-284 Medium
No
No
 2.3 16.11.2020 SB2020111609
SB2020111711
SB2020111815
and 35 more
#VU48438 - Improper input validation
CVE-2020-25696		 CWE-20 Medium
No
No
 2.3 16.11.2020 SB2020111609
SB2020111711
SB2020111817
and 32 more
#VU47481 - Improper input validation
CVE-2020-13956		 CWE-20 Medium
No
No
 2.3 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 2.2 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more