Known vulnerabilities in IBM Cloud Application Performance Management (APM) - page 14

Vendor: IBM Corporation
Software: IBM Cloud Application Performance Management (APM)
Software CPE: cpe:2.3:a:ibm_corporation:apm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 504
Public exploits: 30
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Application Performance Management (APM) IBM Cloud Application Performance Management (APM) is affected by 504 known vulnerabilities: 2 critical, 125 high, 240 medium, 137 low Critical High Medium Low

Vulnerabilities (504)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86346 - Resource exhaustion
CVE-2023-30443		 CWE-400 Low
No
No
 8.1.4.0.4 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 11 more
#VU86337 - Resource exhaustion
CVE-2023-30447		 CWE-400 Medium
No
No
 8.1.4.0.4 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 11 more
#VU86069 - Exposure of sensitive information to an unauthorized actor
CVE-2016-1000345		 CWE-200 Medium
No
No
 8.1.4.0.14 05.02.2024 SB2024020522
SB2025011564
SB2018091126
#VU86068 - Key Management Errors
CVE-2016-1000346		 CWE-320 Low
No
No
 8.1.4.0.14 05.02.2024 SB2024020522
SB2025011564
SB2018091126
#VU86066 - Cryptographic Issues
CVE-2016-1000344		 CWE-310 Medium
No
No
 8.1.4.0.14 05.02.2024 SB2024020522
SB2025011564
SB2025011620
and 1 more
#VU86062 - Cryptographic Issues
CVE-2016-1000352		 CWE-310 Medium
No
No
 8.1.4.0.14 05.02.2024 SB2024020522
SB2025011564
SB2025011620
and 1 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 8.1.4.0.14 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU67585 - Server-Side Request Forgery (SSRF)
CVE-2022-40146		 CWE-918 Medium
Available
No
 8.1.4.0.14 22.09.2022 SB2022092232
SB2023011763
SB2023011838
and 21 more
#VU55035 - Information Exposure Through Timing Discrepancy
CVE-2020-15522		 CWE-208 Medium
No
No
 8.1.4.0.14 20.07.2021 SB2021072033
SB2021062601
SB2022062815
and 11 more
#VU48199 - Exposure of sensitive information to an unauthorized actor
CVE-2020-26939		 CWE-200 Medium
No
No
 8.1.4.0.14 02.11.2020 SB2020110803
SB2024020522
SB2024040108
and 3 more
#VU29068 - Server-Side Request Forgery (SSRF)
CVE-2019-17566		 CWE-918 Medium
No
No
 8.1.4.0.14 16.06.2020 SB2020061613
SB2020062304
SB2020072310
and 23 more
#VU27499 - Deserialization of Untrusted Data
CVE-2018-1000613		 CWE-502 Medium
No
No
 8.1.4.0.14 04.05.2020 SB2018070915
SB2020050421
SB2018080316
and 5 more
#VU22272 - Missing release of memory after effective lifetime
CVE-2019-17359		 CWE-401 Medium
No
No
 8.1.4.0.14 24.10.2019 SB2019102418
SB2020011478
SB2020042338
and 14 more
#VU13591 - Cryptographic Issues
CVE-2016-1000343		 CWE-310 Low
No
No
 8.1.4.0.14 05.07.2018 SB2018060419
SB2024020522
SB2025011564
and 2 more
#VU13590 - Improper Verification of Cryptographic Signature
CVE-2016-1000342		 CWE-347 Low
No
No
 8.1.4.0.14 05.07.2018 SB2018060418
SB2024020522
SB2025011564
and 2 more
#VU13589 - Cryptographic Issues
CVE-2016-1000341		 CWE-310 Low
No
No
 8.1.4.0.14 05.07.2018 SB2018060417
SB2024020522
SB2025011564
and 1 more
#VU13588 - Cryptographic Issues
CVE-2016-1000340		 CWE-310 Low
No
No
 8.1.4.0.14 05.07.2018 SB2018060416
SB2024020522
SB2025011564
and 2 more
#VU13587 - Cryptographic Issues
CVE-2016-1000339		 CWE-310 Low
No
No
 8.1.4.0.14 05.07.2018 SB2018060415
SB2024020522
SB2025011564
and 1 more
#VU13586 - Improper Verification of Cryptographic Signature
CVE-2016-1000338		 CWE-347 Low
No
No
 8.1.4.0.14 05.07.2018 SB2018060112
SB2024020522
SB2025011564
and 2 more
#VU40543 - Exposure of sensitive information to an unauthorized actor
CVE-2015-6644		 CWE-200 Low
No
No
 8.1.4.0.14 06.01.2016 SB2016010604
SB2024020522
SB2017042023
and 1 more


Showing elements 261 - 280 out of 504