Known vulnerabilities in IBM Cloud Application Performance Management (APM) - page 2

Vendor: IBM Corporation
Software: IBM Cloud Application Performance Management (APM)
Software CPE: cpe:2.3:a:ibm_corporation:apm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 504
Public exploits: 30
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Application Performance Management (APM) IBM Cloud Application Performance Management (APM) is affected by 504 known vulnerabilities: 2 critical, 125 high, 240 medium, 137 low Critical High Medium Low

Vulnerabilities (504)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122747 - Improper input validation
CVE-2025-13867		 CWE-20 Medium
No
No
 8.1.4.0.18 12.02.2026 SB2026021208
SB2026021211
SB2026021216
and 5 more
#VU122746 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2025-14689		 CWE-943 Medium
No
No
 8.1.4.0.18 12.02.2026 SB2026021207
SB2026021213
SB2026021215
and 5 more
#VU122744 - Unprotected Storage of Credentials
CVE-2025-36425		 CWE-256 Low
No
No
 8.1.4.0.18 12.02.2026 SB2026021205
SB2026022012
SB2026030931
and 3 more
#VU122743 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-36247		 CWE-611 Medium
No
No
 8.1.4.0.18 12.02.2026 SB2026021204
SB2026022012
SB2026030931
and 3 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 8.1.4.0.19 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932		 CWE-20 Medium
No
No
 8.1.4.0.19 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 8.1.4.0.19 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 90 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 8.1.4.0.19 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 92 more
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12635		 CWE-79 Medium
No
No
 8.1.4.0.19 12.12.2025 SB2025121283
SB2025121517
SB2025121518
and 42 more
#VU115568 - Allocation of Resources Without Limits or Throttling
CVE-2025-36047		 CWE-770 Medium
No
No
 8.1.4.0.19 16.09.2025 SB20250916312
SB20250916316
SB20250916321
and 29 more
#VU112940 - Improper input validation
CVE-2025-30761		 CWE-20 Medium
No
No
 8.1.4.0.29 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 77 more
#VU112941 - Improper input validation
CVE-2025-30754		 CWE-20 Medium
No
No
 8.1.4.0.29 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112937 - Improper input validation
CVE-2025-30749		 CWE-20 High
No
No
 8.1.4.0.29 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106		 CWE-20 High
No
No
 8.1.4.0.29 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU112257 - Improper input validation
CVE-2025-31672		 CWE-20 Medium
No
No
 8.1.4.0.18 04.07.2025 SB20250704104
SB2025070708
SB2025071664
and 23 more
#VU112132 - Stack-based buffer overflow
CVE-2025-4447		 CWE-121 Medium
No
No
 8.1.4.0.18 03.07.2025 SB2025070315
SB2025070316
SB2025070319
and 54 more
#VU108843 - Resource exhaustion
CVE-2025-46392		 CWE-400 Medium
No
No
 8.1.4.0.18 09.05.2025 SB2025050949
SB2025081124
SB2025091517
and 7 more
#VU107520 - Improper input validation
CVE-2025-21587		 CWE-20 Medium
No
No
 8.1.4.0.18 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 103 more
#VU107521 - Improper input validation
CVE-2025-30698		 CWE-20 Medium
No
No
 8.1.4.0.18 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 93 more
#VU64513 - Permissions, Privileges, and Access Controls
CVE-2021-33036		 CWE-264 Medium
No
No
 8.1.4.0.19 20.06.2022 SB2022062017
SB2022102620
SB2022102155
and 3 more


Showing elements 21 - 40 out of 504