Known vulnerabilities in IBM Cloud Application Performance Management (APM) - page 6

Software CPE: cpe:2.3:a:ibm_corporation:apm:*:*:*:*:*:*:*:*
Total vulnerabilities: 504
Public exploits: 30
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Application Performance Management (APM) IBM Cloud Application Performance Management (APM) is affected by 504 known vulnerabilities: 2 critical, 125 high, 240 medium, 137 low Critical High Medium Low

Vulnerabilities (504)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94820 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2014-125087
CWE-611 High
No
No
8.1.4.0.16 29.07.2024 SB2024072906
SB2024072908
SB2024082841
and 1 more
#VU94728 - Resource exhaustion
CVE-2023-29267
CWE-400 Medium
No
No
8.1.4.0.4 25.07.2024 SB2024072511
SB2024072902
SB2024073008
and 10 more
#VU94555 - Improper input validation
CVE-2024-21147
CWE-20 Medium
No
No
8.1.4.0.28 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU94556 - Improper input validation
CVE-2024-21145
CWE-20 Medium
No
No
8.1.4.0.28 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU94557 - Improper input validation
CVE-2024-21140
CWE-20 Medium
No
No
8.1.4.0.28 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 119 more
#VU94558 - Improper input validation
CVE-2024-21144
CWE-20 Low
No
No
8.1.4.0.28 18.07.2024 SB20240718154
SB20240718155
SB20240718192
and 114 more
#VU93359 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2016-5000
CWE-611 Low
No
No
8.1.4.0.16 26.06.2024 SB2021022238
SB2024082841
SB2025051934
#VU88173 - Resource exhaustion
CVE-2023-51775
CWE-400 Medium
No
No
8.1.4.0.16 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU86821 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2009-2625
CWE-835 Medium
No
No
8.1.4.0.16 27.02.2024 SB2024022724
SB2024030723
SB2024030833
and 12 more
#VU86355 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2017-5644
CWE-776 Low
No
No
8.1.4.0.16 13.02.2024 SB2024021305
SB2024022312
SB2024022724
and 5 more
#VU82299 - Heap-based Buffer Overflow
CVE-2023-45853
CWE-122 Medium
No
No
8.1.4.0.4 23.10.2023 SB2023102325
SB2023102633
SB2023102634
and 40 more
#VU80792 - Improper input validation
CVE-2023-36479
CWE-20 Medium
No
No
8.1.4.0.16 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU76487 - Inadequate Encryption Strength
CVE-2023-32342
CWE-326 Medium
No
No
8.1.4.0.16 24.05.2023 SB2023052446
SB2023060817
SB2023061605
and 25 more
#VU69531 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-25168
CWE-78 High
No
No
8.1.4.0.16 23.11.2022 SB2022112314
SB2022112334
SB2022121525
and 10 more
#VU62082 - Security Features
CVE-2022-26612
CWE-254 Medium
No
No
8.1.4.0.16 12.04.2022 SB2022041216
SB2022103132
SB2022112334
and 8 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415
CWE-611 High
No
No
8.1.4.0.16 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more
#VU18689 - Permissions, Privileges, and Access Controls
CVE-2018-8029
CWE-264 High
No
No
8.1.4.0.16 06.06.2019 SB2019060604
SB2021120219
SB2021120336
and 4 more
#VU15972 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-8009
CWE-22 High
No
No
8.1.4.0.16 20.11.2018 SB2018112008
SB2019112016
SB2022072128
and 4 more
#VU37620 - Exposure of sensitive information to an unauthorized actor
CVE-2017-15713
CWE-200 Medium
No
No
8.1.4.0.16 19.01.2018 SB2017060509
SB2021120219
SB2021120336
and 7 more
#VU44897 - Exposure of sensitive information to an unauthorized actor
CVE-2011-1498
CWE-200 Medium
No
No
8.1.4.0.16 08.07.2011 SB2011070803
SB2023092037
SB2023101153
and 4 more


Showing elements 101 - 120 out of 504