Known vulnerabilities in IBM Cloud Application Performance Management (APM) - page 16

Vendor: IBM Corporation
Software: IBM Cloud Application Performance Management (APM)
Software CPE: cpe:2.3:a:ibm_corporation:apm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 504
Public exploits: 30
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Application Performance Management (APM) IBM Cloud Application Performance Management (APM) is affected by 504 known vulnerabilities: 2 critical, 125 high, 240 medium, 137 low Critical High Medium Low

Vulnerabilities (504)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 8.1.4.0.14 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 8.1.4.0.14 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU49967 - Deserialization of Untrusted Data
CVE-2021-20190		 CWE-502 High
No
No
 8.1.4.0.14 19.01.2021 SB2021012514
SB2021042826
SB2021050708
and 17 more
#VU49369 - Deserialization of Untrusted Data
CVE-2020-36180		 CWE-502 High
Available
No
 8.1.4.0.14 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 16 more
#VU49370 - Deserialization of Untrusted Data
CVE-2020-36182		 CWE-502 High
No
No
 8.1.4.0.14 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 17 more
#VU49367 - Deserialization of Untrusted Data
CVE-2020-36188		 CWE-502 High
Available
No
 8.1.4.0.14 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 17 more
#VU49372 - Deserialization of Untrusted Data
CVE-2020-36181		 CWE-502 High
No
No
 8.1.4.0.14 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 17 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 8.1.4.0.14 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU46305 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-24616		 CWE-94 High
Available
No
 8.1.4.0.14 25.08.2020 SB2020090706
SB2022060909
SB2022101121
and 14 more
#VU29131 - Deserialization of Untrusted Data
CVE-2020-14061		 CWE-502 High
No
No
 8.1.4.0.14 18.06.2020 SB2020061806
SB2020070320
SB2020073033
and 15 more
#VU27032 - Deserialization of Untrusted Data
CVE-2020-11620		 CWE-502 High
No
No
 8.1.4.0.14 20.04.2020 SB2020030909
SB2020052628
SB2020073033
and 15 more
#VU26492 - Deserialization of Untrusted Data
CVE-2020-10969		 CWE-502 High
No
No
 8.1.4.0.14 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 14 more
#VU24272 - Improper Access Control
CVE-2019-20330		 CWE-284 Low
No
No
 8.1.4.0.14 14.01.2020 SB2020010309
SB2020032709
SB2020042101
and 18 more
#VU21580 - Improper input validation
CVE-2019-16942		 CWE-20 Medium
No
No
 8.1.4.0.14 07.10.2019 SB2019100711
SB2019100716
SB2019111903
and 23 more
#VU19942 - Deserialization of Untrusted Data
CVE-2018-12022		 CWE-502 Medium
No
No
 8.1.4.0.14 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 18 more
#VU19941 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12086		 CWE-200 Medium
No
No
 8.1.4.0.14 06.08.2019 SB2019052407
SB2019092703
SB2019100116
and 30 more
#VU19933 - Permissions, Privileges, and Access Controls
CVE-2019-14379		 CWE-264 High
No
No
 8.1.4.0.14 05.08.2019 SB2019091307
SB2019092703
SB2019100116
and 33 more
#VU19018 - Deserialization of Untrusted Data
CVE-2019-12384		 CWE-502 High
No
No
 8.1.4.0.14 04.07.2019 SB2019091218
SB2019092703
SB2019100116
and 28 more
#VU17778 - Improper input validation
CVE-2018-14719		 CWE-20 High
No
No
 8.1.4.0.14 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 22 more
#VU10610 - Deserialization of Untrusted Data
CVE-2018-5968		 CWE-502 High
No
No
 8.1.4.0.14 16.02.2018 SB2018021604
SB2018021605
SB2018051725
and 14 more


Showing elements 301 - 320 out of 504