Known vulnerabilities in Asset Repository in IBM Cloud Pak for Integration (CP4I)
Vendor:
IBM Corporation
Software CPE:
cpe:2.3:a:ibm_corporation:asset_repository_in_ibm_cloud_pak_for_integration_cp4i:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
11
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (11)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU56829 - Improper input validation CVE-2021-29923 |
CWE-20 | Medium | 2020.4.1-3, 2021.2.1-1 | 22.09.2021 |
SB2021092225 SB2021092226 SB2021100408 and 37 more |
||
| #VU56024 - Resource Management Errors CVE-2021-33198 |
CWE-399 | Medium | 2020.4.1-3, 2021.2.1-1 | 22.08.2021 |
SB2021070405 SB2021082204 SB2021083116 and 46 more |
||
| #VU56023 - Missing Authorization CVE-2021-33197 |
CWE-862 | Medium | 2020.4.1-3, 2021.2.1-1 | 22.08.2021 |
SB2021070405 SB2021082204 SB2021083116 and 41 more |
||
| #VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-33195 |
CWE-79 | Medium | 2020.4.1-3, 2021.2.1-1 | 22.08.2021 |
SB2021070405 SB2021082204 SB2021083116 and 38 more |
||
| #VU55668 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2021-36221 |
CWE-362 | Medium | 2020.4.1-3, 2021.2.1-1 | 10.08.2021 |
SB2021081001 SB2021081217 SB2021081219 and 32 more |
||
| #VU55665 - Improper Certificate Validation CVE-2021-34558 |
CWE-295 | Medium | 2020.4.1-3, 2021.2.1-1 | 09.08.2021 |
SB2021080909 SB2021080912 SB2021081122 and 65 more |
||
| #VU55579 - Resource exhaustion CVE-2021-23413 |
CWE-400 | Medium | 2020.4.1-3, 2021.2.1-1 | 04.08.2021 |
SB2021080408 SB2022081837 SB20230418118 and 4 more |
||
| #VU55560 - Use After Free CVE-2021-22930 |
CWE-416 | High | 2020.4.1-3, 2021.2.1-1 | 03.08.2021 |
SB2021080320 SB2021080324 SB2021080325 and 35 more |
||
| #VU54625 - Incorrect Default Permissions CVE-2021-22921 |
CWE-276 | Low | 2020.4.1-3, 2021.2.1-1 | 08.07.2021 |
SB2021100417 SB2022031104 SB2022060315 and 7 more |
||
| #VU54624 - Out-of-bounds read CVE-2021-22918 |
CWE-125 | Medium | 2020.4.1-3, 2021.2.1-1 | 08.07.2021 |
SB2021070819 SB2021072009 SB2021081123 and 40 more |
||
| #VU54521 - Resource exhaustion CVE-2021-33196 |
CWE-400 | Medium | 2020.4.1-3, 2021.2.1-1 | 04.07.2021 |
SB2021070405 SB2021070406 SB2021071515 and 37 more |