Known vulnerabilities in IBM Cloud Application Performance Management (APM) - page 11

Software CPE: cpe:2.3:a:ibm_corporation:apm:*:*:*:*:*:*:*:*
Total vulnerabilities: 504
Public exploits: 30
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Application Performance Management (APM) IBM Cloud Application Performance Management (APM) is affected by 504 known vulnerabilities: 2 critical, 125 high, 240 medium, 137 low Critical High Medium Low

Vulnerabilities (504)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79665 - Improper input validation
CVE-2023-38737
CWE-20 Medium
No
No
8.1.4.0.15 17.08.2023 SB2023081721
SB2023100203
SB2023100308
and 20 more
#VU78414 - Improper input validation
CVE-2023-22049
CWE-20 Low
No
No
8.1.4.0.15 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU78255 - Improper input validation
CVE-2015-0250
CWE-20 Medium
No
No
8.1.4.0.15 14.07.2023 SB2023071416
SB2023091137
SB2023092106
and 4 more
#VU74271 - Resource exhaustion
CVE-2012-2098
CWE-400 Medium
No
No
8.1.4.0.15 31.03.2023 SB2012062904
SB2023040315
SB2023040465
and 10 more
#VU60181 - Resource Management Errors
CVE-2021-22569
CWE-399 Medium
Available
No
8.1.4.0.15 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428
CWE-613 Low
No
No
8.1.4.0.15 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more
#VU54856 - Resource exhaustion
CVE-2021-36374
CWE-400 Medium
No
No
8.1.4.0.15 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 43 more
#VU54855 - Resource exhaustion
CVE-2021-36373
CWE-400 Medium
No
No
8.1.4.0.15 14.07.2021 SB2021071409
SB2021072011
SB2022080830
and 16 more
#VU54853 - Resource exhaustion
CVE-2021-36090
CWE-400 Medium
No
No
8.1.4.0.15 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU54852 - Resource exhaustion
CVE-2021-35517
CWE-400 Medium
No
No
8.1.4.0.15 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 33 more
#VU54851 - Resource exhaustion
CVE-2021-35516
CWE-400 Medium
No
No
8.1.4.0.15 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 21 more
#VU51876 - Resource exhaustion
CVE-2021-28165
CWE-400 Medium
No
No
8.1.4.0.15 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945
CWE-276 Low
No
No
8.1.4.0.15 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979
CWE-264 Low
No
No
8.1.4.0.15 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more
#VU26320 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10241
CWE-79 Low
No
No
8.1.4.0.15 23.03.2020 SB2020032710
SB2020072802
SB2020121701
and 14 more
#VU25067 - Improper input validation
CVE-2019-10247
CWE-20 Medium
No
No
8.1.4.0.15 07.02.2020 SB2020011489
SB2020032710
SB2020042110
and 25 more
#VU14441 - Improper input validation
CVE-2018-11771
CWE-20 Low
No
No
8.1.4.0.15 16.08.2018 SB2018081704
SB2020032701
SB2022072128
and 6 more
#VU13180 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-5662
CWE-611 Low
No
No
8.1.4.0.15 05.06.2018 SB2018060503
SB2017050924
SB2023071416
and 7 more
#VU13059 - Deserialization of Untrusted Data
CVE-2018-8013
CWE-502 Low
No
No
8.1.4.0.15 30.05.2018 SB2018053011
SB2018060503
SB2019011705
and 16 more
#VU340 - Improper input validation
CVE-2016-4800
CWE-20 Medium
No
No
8.1.4.0.15 20.08.2016 SB2016060101
SB2023011129
SB2024021519


Showing elements 201 - 220 out of 504