Known vulnerabilities in IBM Cloud Application Performance Management (APM) - page 21

Software CPE: cpe:2.3:a:ibm_corporation:apm:*:*:*:*:*:*:*:*
Total vulnerabilities: 504
Public exploits: 30
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Application Performance Management (APM) IBM Cloud Application Performance Management (APM) is affected by 504 known vulnerabilities: 2 critical, 125 high, 240 medium, 137 low Critical High Medium Low

Vulnerabilities (504)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77628 - Improper input validation
CVE-2012-6153
CWE-20 Medium
No
No
8.1.4.0.16, 8.1.4.0.20 22.06.2023 SB2023062250
SB2023092013
SB2023092037
and 15 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976
CWE-276 Low
No
No
8.1.4.0.14 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU76753 - Allocation of Resources Without Limits or Throttling
CVE-2023-28867
CWE-770 Medium
No
No
8.1.4.0.14 01.06.2023 SB2023060123
SB2023062739
SB2023063014
and 17 more
#VU75686 - Improper Validation of Certificate with Host Mismatch
CVE-2022-39161
CWE-297 Low
No
No
8.1.4.0.14 03.05.2023 SB2023050303
SB2023050304
SB2023063008
and 7 more
#VU71225 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-23599
CWE-78 Medium
No
No
8.1.4.0.17 17.01.2023 SB2023011728
SB2023011729
SB2023011807
and 33 more
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165
CWE-444 Medium
No
No
8.1.4.0.14 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647
CWE-502 Medium
No
No
8.1.4.0.14 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU60084 - Missing initialization of resource
CVE-2021-28167
CWE-909 Medium
No
No
8.1.4.0.25 27.01.2022 SB2021042158
SB2022102806
SB2022112426
and 15 more
#VU57150 - Improper Certificate Validation
CVE-2014-3577
CWE-295 Low
No
No
8.1.4.0.16, 8.1.4.0.20 08.10.2021 SB2014082106
SB2021100807
SB2023020872
and 24 more
#VU50000 - Permissions, Privileges, and Access Controls
CVE-2020-9492
CWE-264 Medium
No
No
8.1.4.0.14 26.01.2021 SB2021012612
SB2021120219
SB2021120336
and 12 more
#VU49517 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2021-23926
CWE-776 High
No
No
8.1.4.0.20 14.01.2021 SB2021011401
SB2022072039
SB2022081823
and 21 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908
CWE-276 Low
No
No
8.1.4.0.14 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU48792 - Incorrect Default Permissions
CVE-2020-17521
CWE-276 Low
No
No
8.1.4.0.20 06.12.2020 SB2020120601
SB2021012082
SB2021012083
and 31 more
#VU47481 - Improper input validation
CVE-2020-13956
CWE-20 Medium
No
No
8.1.4.0.16, 8.1.4.0.20 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more
#VU35193 - Memory corruption
CVE-2018-11768
CWE-119 Medium
No
No
8.1.4.0.14 04.10.2019 SB2017060509
SB2021120219
SB2021120336
and 3 more
#VU16559 - Permissions, Privileges, and Access Controls
CVE-2017-15288
CWE-264 Low
No
No
8.1.4.0.14 15.12.2018 SB2018121714
SB2023090742
SB2021022238
#VU12886 - Uncontrolled Memory Allocation
CVE-2018-10237
CWE-789 Low
No
No
8.1.4.0.14 21.05.2018 SB2018052310
SB2018083005
SB2018092411
and 43 more
#VU37982 - Cleartext Transmission of Sensitive Information
CVE-2017-3166
CWE-319 Low
No
No
8.1.4.0.14 13.11.2017 SB2017060509
SB2023090737
SB2018070222
and 1 more
#VU8911 - Permissions, Privileges, and Access Controls
CVE-2016-6814
CWE-264 Low
No
No
8.1.4.0.20 20.10.2017 SB2017101714
SB2020031303
SB20200114129
and 12 more
#VU831 - Deserialization of Untrusted Data
CVE-2015-3253
CWE-502 High
No
No
8.1.4.0.20 11.10.2016 SB2020042104
SB2023030707
SB2023040530
and 5 more


Showing elements 401 - 420 out of 504