Known vulnerabilities in IBM Cloud Application Performance Management (APM) - page 5

Vendor: IBM Corporation
Software: IBM Cloud Application Performance Management (APM)
Software CPE: cpe:2.3:a:ibm_corporation:apm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 504
Public exploits: 30
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Application Performance Management (APM) IBM Cloud Application Performance Management (APM) is affected by 504 known vulnerabilities: 2 critical, 125 high, 240 medium, 137 low Critical High Medium Low

Vulnerabilities (504)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103322 - Out-of-bounds read
CVE-2024-36124		 CWE-125 Medium
No
No
 8.1.4.0.17 27.01.2025 SB2025012734
SB2025012735
SB2025013120
and 7 more
#VU101344 - Integer overflow
CVE-2024-10917		 CWE-190 Low
No
No
 8.1.4.0.28 09.12.2024 SB2024120927
SB2024120928
SB2024120929
and 66 more
#VU99975 - Authentication Bypass by Spoofing
CVE-2024-51504		 CWE-290 High
No
No
 8.1.4.0.17 06.11.2024 SB2024110667
SB2024121231
SB2024122015
and 12 more
#VU98644 - Improper input validation
CVE-2024-21235		 CWE-20 Medium
No
No
 8.1.4.0.28 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98645 - Improper input validation
CVE-2024-21210		 CWE-20 Low
No
No
 8.1.4.0.28 15.10.2024 SB20241015215
SB2024101668
SB2024101672
and 122 more
#VU98647 - Improper input validation
CVE-2024-21208		 CWE-20 Low
No
No
 8.1.4.0.28 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98648 - Improper input validation
CVE-2024-21217		 CWE-20 Low
No
No
 8.1.4.0.28 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763		 CWE-918 Medium
No
No
 8.1.4.0.17 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 8.1.4.0.17 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU97226 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-27267		 CWE-362 Medium
No
No
 8.1.4.0.28 12.09.2024 SB2024091291
SB2024091292
SB2024091618
and 57 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 8.1.4.0.28 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU94560 - Improper input validation
CVE-2024-21138		 CWE-20 Low
No
No
 8.1.4.0.28 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 117 more
#VU89343 - Resource exhaustion
CVE-2023-38264		 CWE-400 Medium
No
No
 8.1.4.0.17 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 8.1.4.0.17 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88665 - Improper input validation
CVE-2024-21085		 CWE-20 Low
No
No
 8.1.4.0.17 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88668 - Improper input validation
CVE-2024-21094		 CWE-20 Low
No
No
 8.1.4.0.17 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more
#VU88123 - Resource exhaustion
CVE-2024-22353		 CWE-400 Medium
No
No
 8.1.4.0.17 04.04.2024 SB2024040423
SB2024050220
SB2024050801
and 31 more
#VU87831 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27270		 CWE-79 Medium
No
No
 8.1.4.0.17 26.03.2024 SB2024032654
SB2024050220
SB2024050920
and 31 more
#VU86988 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50312		 CWE-327 Low
No
No
 8.1.4.0.17 04.03.2024 SB2024030425
SB2024031819
SB2024032049
and 49 more
#VU86861 - Exposure of sensitive information to an unauthorized actor
CVE-2024-22371		 CWE-200 Low
No
No
 8.1.4.0.17 27.02.2024 SB2024022034
SB2024032819
SB2024061872
and 4 more


Showing elements 81 - 100 out of 504