Known vulnerabilities in IBM Cloud Application Performance Management (APM) - page 6

Vendor: IBM Corporation
Software: IBM Cloud Application Performance Management (APM)
Software CPE: cpe:2.3:a:ibm_corporation:apm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 504
Public exploits: 30
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Application Performance Management (APM) IBM Cloud Application Performance Management (APM) is affected by 504 known vulnerabilities: 2 critical, 125 high, 240 medium, 137 low Critical High Medium Low

Vulnerabilities (504)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94820 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2014-125087		 CWE-611 High
No
No
 8.1.4.0.16 29.07.2024 SB2024072906
SB2024072908
SB2024082841
and 1 more
#VU94555 - Improper input validation
CVE-2024-21147		 CWE-20 Medium
No
No
 8.1.4.0.28 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU94556 - Improper input validation
CVE-2024-21145		 CWE-20 Medium
No
No
 8.1.4.0.28 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU94557 - Improper input validation
CVE-2024-21140		 CWE-20 Medium
No
No
 8.1.4.0.28 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 119 more
#VU94558 - Improper input validation
CVE-2024-21144		 CWE-20 Low
No
No
 8.1.4.0.28 18.07.2024 SB20240718154
SB20240718155
SB20240718192
and 114 more
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 8.1.4.0.16 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU86821 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2009-2625		 CWE-835 Medium
No
No
 8.1.4.0.16 27.02.2024 SB2024022724
SB2024030723
SB2024030833
and 12 more
#VU85472 - Improper input validation
CVE-2024-20926		 CWE-20 Medium
No
No
 8.1.4.0.16, 8.1.4.0.26 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945		 CWE-20 Low
No
No
 8.1.4.0.16, 8.1.4.0.26 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU82583 - Observable discrepancy
CVE-2023-33850		 CWE-203 Medium
No
No
 8.1.4.0.16, 8.1.4.0.26 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU82534 - Resource exhaustion
CVE-2013-4002		 CWE-400 Medium
No
No
 8.1.4.0.14, 8.1.4.0.16 27.10.2023 SB2023102710
SB2023102722
SB2023103009
and 14 more
#VU80792 - Improper input validation
CVE-2023-36479		 CWE-20 Medium
No
No
 8.1.4.0.16 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU76487 - Inadequate Encryption Strength
CVE-2023-32342		 CWE-326 Medium
No
No
 8.1.4.0.16 24.05.2023 SB2023052446
SB2023060817
SB2023061605
and 25 more
#VU69531 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-25168		 CWE-78 High
No
No
 8.1.4.0.16 23.11.2022 SB2022112314
SB2022112334
SB2022121525
and 10 more
#VU62082 - Security Features
CVE-2022-26612		 CWE-254 Medium
No
No
 8.1.4.0.16 12.04.2022 SB2022041216
SB2022103132
SB2022112334
and 8 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 8.1.4.0.14, 8.1.4.0.16 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU55416 - Improper input validation
CVE-2012-0881		 CWE-20 Medium
No
No
 8.1.4.0.14, 8.1.4.0.16 28.07.2021 SB2021072822
SB2023070731
SB2023102710
and 19 more
#VU18689 - Permissions, Privileges, and Access Controls
CVE-2018-8029		 CWE-264 High
No
No
 8.1.4.0.16 06.06.2019 SB2019060604
SB2021120219
SB2021120336
and 4 more
#VU15972 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-8009		 CWE-22 High
No
No
 8.1.4.0.16 20.11.2018 SB2018112008
SB2019112016
SB2022072128
and 4 more
#VU37620 - Exposure of sensitive information to an unauthorized actor
CVE-2017-15713		 CWE-200 Medium
No
No
 8.1.4.0.16 19.01.2018 SB2017060509
SB2021120219
SB2021120336
and 7 more


Showing elements 101 - 120 out of 504