Known vulnerabilities in IBM Cloud Application Performance Management (APM) - page 4

Vendor: IBM Corporation
Software: IBM Cloud Application Performance Management (APM)
Software CPE: cpe:2.3:a:ibm_corporation:apm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 504
Public exploits: 30
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Application Performance Management (APM) IBM Cloud Application Performance Management (APM) is affected by 504 known vulnerabilities: 2 critical, 125 high, 240 medium, 137 low Critical High Medium Low

Vulnerabilities (504)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104172 - Uncontrolled Memory Allocation
CVE-2024-45663		 CWE-789 Medium
No
No
 8.1.4.0.4 25.02.2025 SB2025022520
SB2025022521
SB2025031921
and 6 more
#VU104124 - Allocation of Resources Without Limits or Throttling
CVE-2024-41762		 CWE-770 Medium
No
No
 8.1.4.0.4 21.02.2025 SB2025022118
SB2025022521
SB2025031921
and 6 more
#VU104123 - Allocation of Resources Without Limits or Throttling
CVE-2024-41761		 CWE-770 Low
No
No
 8.1.4.0.4 21.02.2025 SB2025022117
SB2025022521
SB2025031921
and 6 more
#VU104121 - Information Exposure Through Log Files
CVE-2024-40679		 CWE-532 Low
No
No
 8.1.4.0.4 21.02.2025 SB2025022116
SB2025022521
SB2025031921
and 7 more
#VU104120 - Uncontrolled Memory Allocation
CVE-2024-37071		 CWE-789 Low
No
No
 8.1.4.0.4 21.02.2025 SB2025022115
SB2025022521
SB2025031921
and 6 more
#VU103643 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2023-31442		 CWE-350 High
No
No
 8.1.4.0.17 05.02.2025 SB2025020525
SB2025020526
SB2025022518
and 1 more
#VU98517 - Resource exhaustion
CVE-2024-8184		 CWE-400 Medium
No
No
 8.1.4.0.17 14.10.2024 SB20241014108
SB2024101836
SB2024112849
and 38 more
#VU98434 - Resource exhaustion
CVE-2024-35136		 CWE-400 Low
No
No
 8.1.4.0.4 14.10.2024 SB2024101421
SB2024101427
SB2024102434
and 7 more
#VU98433 - Uncontrolled Memory Allocation
CVE-2024-35152		 CWE-789 Low
No
No
 8.1.4.0.4 14.10.2024 SB2024101403
SB2024101427
SB2024102434
and 7 more
#VU98432 - Uncontrolled Memory Allocation
CVE-2024-37529		 CWE-789 Low
No
No
 8.1.4.0.4 14.10.2024 SB2024101402
SB2024101427
SB2024102434
and 7 more
#VU98137 - Allocation of Resources Without Limits or Throttling
CVE-2024-40094		 CWE-770 Medium
Available
No
 8.1.4.0.17 08.10.2024 SB2024100835
SB2024100936
SB2024101593
and 27 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 8.1.4.0.17 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU98024 - Improper input validation
CVE-2024-47561		 CWE-20 High
No
No
 8.1.4.0.17 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU96058 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50314		 CWE-200 Low
No
No
 8.1.4.0.17 15.08.2024 SB2024081566
SB2024091324
SB2024091814
and 44 more
#VU91984 - Permissions, Privileges, and Access Controls
CVE-2024-3933		 CWE-264 Low
No
No
 8.1.4.0.27 12.06.2024 SB2024061213
SB20240613101
SB20240613102
and 29 more
#VU88977 - Resource exhaustion
CVE-2024-25026		 CWE-400 Medium
No
No
 8.1.4.0.17 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354		 CWE-611 High
No
No
 8.1.4.0.17 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU88666 - Improper input validation
CVE-2024-21011		 CWE-20 Low
No
No
 8.1.4.0.17 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88136 - Resource exhaustion
CVE-2024-27268		 CWE-400 Medium
No
No
 8.1.4.0.17 04.04.2024 SB2024040437
SB2024050803
SB2024052003
and 40 more
#VU86900 - Improper input validation
CVE-2024-21742		 CWE-20 Medium
No
No
 8.1.4.0.4 28.02.2024 SB2024022829
SB2024032934
SB2024042476
and 12 more


Showing elements 61 - 80 out of 504