Known vulnerabilities in IBM Cloud Application Performance Management (APM) - page 23

Vendor: IBM Corporation
Software: IBM Cloud Application Performance Management (APM)
Software CPE: cpe:2.3:a:ibm_corporation:apm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 504
Public exploits: 30
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Application Performance Management (APM) IBM Cloud Application Performance Management (APM) is affected by 504 known vulnerabilities: 2 critical, 125 high, 240 medium, 137 low Critical High Medium Low

Vulnerabilities (504)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68407 - Resource Management Errors
CVE-2022-42929		 CWE-399 Low
No
No
 8.1.4.0.16 18.10.2022 SB2022101840
SB2022101877
SB2022102007
and 30 more
#VU68406 - Memory corruption
CVE-2022-42928		 CWE-119 High
No
No
 8.1.4.0.16 18.10.2022 SB2022101840
SB2022101877
SB2022102007
and 30 more
#VU68405 - Security Features
CVE-2022-42927		 CWE-254 Medium
No
No
 8.1.4.0.16 18.10.2022 SB2022101840
SB2022101877
SB2022102007
and 30 more
#VU67505 - Memory corruption
CVE-2022-40962		 CWE-119 High
No
No
 8.1.4.0.16 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 29 more
#VU67504 - Improper input validation
CVE-2022-40957		 CWE-20 Medium
No
No
 8.1.4.0.16 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 28 more
#VU67502 - Security Features
CVE-2022-40958		 CWE-254 Medium
No
No
 8.1.4.0.16 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 30 more
#VU67501 - Use After Free
CVE-2022-40960		 CWE-416 High
No
No
 8.1.4.0.16 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 29 more
#VU67500 - Security Features
CVE-2022-40959		 CWE-254 Medium
No
No
 8.1.4.0.16 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 29 more
#VU66719 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-38472		 CWE-451 Medium
No
No
 8.1.4.0.16 23.08.2022 SB2022082315
SB2022082316
SB2022082411
and 35 more
#VU65796 - Memory corruption
CVE-2022-2505		 CWE-119 High
No
No
 8.1.4.0.16 26.07.2022 SB2022072633
SB2022072841
SB2022072906
and 25 more
#VU65793 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-36319		 CWE-451 Low
No
No
 8.1.4.0.16 26.07.2022 SB2022072633
SB2022072634
SB2022072815
and 36 more
#VU64763 - Memory corruption
CVE-2022-34484		 CWE-119 High
No
No
 8.1.4.0.16 29.06.2022 SB2022062901
SB2022062902
SB2022062903
and 37 more
#VU64762 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-2200		 CWE-94 Medium
No
No
 8.1.4.0.16 29.06.2022 SB2022062901
SB2022062902
SB2022062903
and 36 more
#VU64760 - Error Handling
CVE-2022-34472		 CWE-388 Low
No
No
 8.1.4.0.16 29.06.2022 SB2022062901
SB2022062902
SB2022062903
and 38 more
#VU64752 - Security Features
CVE-2022-34468		 CWE-254 Medium
No
No
 8.1.4.0.16 28.06.2022 SB2022062901
SB2022062902
SB2022062903
and 37 more
#VU63878 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31742		 CWE-200 Medium
No
No
 8.1.4.0.16 31.05.2022 SB2022053116
SB2022053126
SB2022060107
and 33 more
#VU63877 - Use of Uninitialized Variable
CVE-2022-31741		 CWE-457 High
No
No
 8.1.4.0.16 31.05.2022 SB2022053116
SB2022053126
SB2022060107
and 40 more
#VU63873 - Out-of-bounds write
CVE-2022-31737		 CWE-787 High
No
No
 8.1.4.0.16 31.05.2022 SB2022053116
SB2022053126
SB2022060107
and 33 more
#VU63501 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-1802		 CWE-94 High
Available
No
 8.1.4.0.16 21.05.2022 SB2022052102
SB2022052103
SB2022052104
and 32 more
#VU62757 - Permissions, Privileges, and Access Controls
CVE-2022-29909		 CWE-264 High
No
No
 8.1.4.0.16 03.05.2022 SB2022050314
SB2022050425
SB2022050426
and 30 more


Showing elements 441 - 460 out of 504