Known vulnerabilities in Astronomer with IBM

Vendor: IBM Corporation
Software: Astronomer with IBM
Software CPE: cpe:2.3:a:ibm_corporation:astronomer_with_ibm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 72
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Astronomer with IBM Astronomer with IBM is affected by 72 known vulnerabilities: 1 critical, 8 high, 50 medium, 13 low Critical High Medium Low

Vulnerabilities (72)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118669 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-9910		 CWE-79 Low
No
No
 1.1.0 21.11.2025 SB2025112114
SB2025112115
SB2025112459
and 1 more
#VU118530 - Cryptographic Issues
CVE-2025-8556		 CWE-310 Medium
No
No
 1.1.0 14.11.2025 SB2025111412
SB2025111416
SB2025112459
and 3 more
#VU118206 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-57319		 CWE-1321 Medium
No
No
 1.1.0 07.11.2025 SB2025110782
SB2025121603
SB2026010606
and 4 more
#VU118198 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-54798		 CWE-59 Low
No
No
 1.1.0 07.11.2025 SB2025110743
SB2025110755
SB2025112543
and 9 more
#VU118195 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-7969		 CWE-79 Medium
No
No
 1.1.0 07.11.2025 SB2025110741
SB2025110755
SB2025112543
and 4 more
#VU117441 - Improper input validation
CVE-2025-53547		 CWE-20 Low
No
No
 1.1.0 22.10.2025 SB2025102218
SB2025102244
SB2025102245
and 4 more
#VU117332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-59343		 CWE-22 High
No
No
 1.1.0 17.10.2025 SB2025101702
SB2025101703
SB2025101704
and 22 more
#VU117177 - Missing initialization of resource
CVE-2025-54410		 CWE-909 Low
No
No
 1.1.0 15.10.2025 SB2025101533
SB2025101534
SB2025112459
and 6 more
#VU116147 - Allocation of Resources Without Limits or Throttling
CVE-2025-54121		 CWE-770 Medium
No
No
 1.1.0 26.09.2025 SB2025092681
SB2025092682
SB2025092683
and 4 more
#VU116130 - Improper input validation
CVE-2025-9288		 CWE-20 Medium
No
No
 1.1.0 26.09.2025 SB2025092616
SB2025092618
SB2025092620
and 17 more
#VU115217 - Incorrect Authorization
CVE-2025-5187		 CWE-863 Low
No
No
 1.1.0 15.09.2025 SB2025091545
SB2025091548
SB2025091549
and 15 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754		 CWE-770 Medium
Available
No
 1.1.0 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 1.1.0 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 45 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 1.1.0 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 38 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988		 CWE-611 Medium
Available
No
 1.1.0 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 31 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 1.1.0 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 70 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 1.1.0 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more
#VU111980 - Protection Mechanism Failure
CVE-2025-50182		 CWE-693 Low
No
No
 1.1.0 26.06.2025 SB2025062659
SB2025062660
SB2025062662
and 21 more
#VU109599 - Improper Verification of Cryptographic Signature
CVE-2025-47934		 CWE-347 Medium
No
No
 1.1.0 21.05.2025 SB20250521117
SB2025111930
#VU109244 - Missing release of memory after effective lifetime
CVE-2025-47279		 CWE-401 Medium
No
No
 1.1.0 16.05.2025 SB2025051606
SB2025052019
SB2025090104
and 5 more


Showing elements 1 - 20 out of 72