Known vulnerabilities in Astronomer with IBM - page 3

Vendor: IBM Corporation
Software: Astronomer with IBM
Software CPE: cpe:2.3:a:ibm_corporation:astronomer_with_ibm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 72
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Astronomer with IBM Astronomer with IBM is affected by 72 known vulnerabilities: 1 critical, 8 high, 50 medium, 13 low Critical High Medium Low

Vulnerabilities (72)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100921 - Incorrect Regular Expression
CVE-2024-21538		 CWE-185 Medium
No
No
 1.0.1 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 1.0.1 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 1.0.1 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 1.0.1 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 1.0.1 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU94329 - NULL Pointer Dereference
CVE-2024-37890		 CWE-476 Medium
No
No
 1.0.1 15.07.2024 SB2024071508
SB2024071933
SB2024081608
and 32 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 1.0.1 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 1.0.1 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU89537 - Type confusion
CVE-2024-4367		 CWE-843 High
Available
No
 1.0.1 15.05.2024 SB2024051527
SB2024051528
SB2024051530
and 52 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 1.0.1 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 100 more
#VU73872 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29804		 CWE-22 Medium
No
No
 1.0.1 21.03.2023 SB2022071516
SB2023011810
SB2023040531
and 11 more
#VU73870 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-30634		 CWE-835 Medium
No
No
 1.0.1 21.03.2023 SB2022071516
SB2023011810
SB2023042120
and 13 more
#VU70332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41720		 CWE-22 Medium
No
No
 1.0.1 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 13 more
#VU69405 - Improper input validation
CVE-2022-41716		 CWE-20 Low
No
No
 1.0.1 17.11.2022 SB2022111727
SB2022111728
SB2022111741
and 32 more
#VU68897 - Resource exhaustion
CVE-2022-32149		 CWE-400 Medium
No
No
 1.0.1 01.11.2022 SB2022110139
SB2022110140
SB2022110142
and 68 more
#VU68839 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-30580		 CWE-94 Low
No
No
 1.0.1 31.10.2022 SB2022103122
SB2023022738
SB2023033008
and 22 more
#VU68387 - Resource Management Errors
CVE-2022-2879		 CWE-399 Medium
No
No
 1.0.1 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 78 more
#VU66120 - Improper input validation
CVE-2021-41772		 CWE-20 Medium
No
No
 1.0.1 04.08.2022 SB2021110826
SB2022080503
SB2022083021
and 22 more
#VU66068 - Resource exhaustion
CVE-2022-30635		 CWE-400 Medium
No
No
 1.0.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU64865 - Improper Control of Dynamically-Managed Code Resources
CVE-2022-25878		 CWE-913 High
No
No
 1.0.1 04.07.2022 SB2022070404
SB2022120629
SB2023052313
and 2 more


Showing elements 41 - 60 out of 72