Known vulnerabilities in IBM Cloud Application Performance Management (APM) - page 7

Vendor: IBM Corporation
Software: IBM Cloud Application Performance Management (APM)
Software CPE: cpe:2.3:a:ibm_corporation:apm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 504
Public exploits: 30
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Application Performance Management (APM) IBM Cloud Application Performance Management (APM) is affected by 504 known vulnerabilities: 2 critical, 125 high, 240 medium, 137 low Critical High Medium Low

Vulnerabilities (504)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94733 - Resource exhaustion
CVE-2024-28762		 CWE-400 Low
No
No
 8.1.4.0.4 25.07.2024 SB2024072514
SB2024072902
SB2024073008
and 10 more
#VU94728 - Resource exhaustion
CVE-2023-29267		 CWE-400 Medium
No
No
 8.1.4.0.4 25.07.2024 SB2024072511
SB2024072902
SB2024073008
and 10 more
#VU93359 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2016-5000		 CWE-611 Low
No
No
 8.1.4.0.16 26.06.2024 SB2021022238
SB2024082841
SB2025051934
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 8.1.4.0.4 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU87744 - Out-of-bounds write
CVE-2024-29133		 CWE-787 High
No
No
 8.1.4.0.4 22.03.2024 SB2024032169
SB2024032283
SB20240417122
and 40 more
#VU87706 - Out-of-bounds write
CVE-2024-29131		 CWE-787 High
No
No
 8.1.4.0.4 21.03.2024 SB2024032169
SB2024032283
SB20240417122
and 36 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757		 CWE-611 Medium
No
No
 8.1.4.0.4 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 75 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 8.1.4.0.4 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 8.1.4.0.4 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 103 more
#VU86355 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2017-5644		 CWE-776 Low
No
No
 8.1.4.0.16 13.02.2024 SB2024021305
SB2024022312
SB2024022724
and 5 more
#VU85468 - Improper input validation
CVE-2024-20918		 CWE-20 Medium
No
No
 8.1.4.0.16, 8.1.4.0.26 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85469 - Improper input validation
CVE-2024-20952		 CWE-20 Medium
No
No
 8.1.4.0.16, 8.1.4.0.26 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85470 - Improper input validation
CVE-2024-20919		 CWE-20 Medium
No
No
 8.1.4.0.16, 8.1.4.0.26 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85471 - Improper input validation
CVE-2024-20921		 CWE-20 Medium
No
No
 8.1.4.0.16, 8.1.4.0.26 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU82299 - Heap-based Buffer Overflow
CVE-2023-45853		 CWE-122 Medium
No
No
 8.1.4.0.4 23.10.2023 SB2023102325
SB2023102633
SB2023102634
and 40 more
#VU77628 - Improper input validation
CVE-2012-6153		 CWE-20 Medium
No
No
 8.1.4.0.16, 8.1.4.0.20 22.06.2023 SB2023062250
SB2023092013
SB2023092037
and 15 more
#VU57150 - Improper Certificate Validation
CVE-2014-3577		 CWE-295 Low
No
No
 8.1.4.0.16, 8.1.4.0.20 08.10.2021 SB2014082106
SB2021100807
SB2023020872
and 24 more
#VU47481 - Improper input validation
CVE-2020-13956		 CWE-20 Medium
No
No
 8.1.4.0.16, 8.1.4.0.20 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415		 CWE-611 High
No
No
 8.1.4.0.16 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more
#VU44897 - Exposure of sensitive information to an unauthorized actor
CVE-2011-1498		 CWE-200 Medium
No
No
 8.1.4.0.16 08.07.2011 SB2011070803
SB2023092037
SB2023101153
and 4 more


Showing elements 121 - 140 out of 504