Known vulnerabilities in Atlas eDiscovery Process Management

Known vulnerabilities in Atlas eDiscovery Process Management

Vendor: IBM Corporation

Software: Atlas eDiscovery Process Management

Software CPE: cpe:2.3:a:ibm_corporation:atlas_ediscovery_process_management:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 17

Public exploits: 5

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Vulnerabilities (17)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU73956 - Server-Side Request Forgery (SSRF) CVE-2021-39152	CWE-918	High	Available	No	6.0.3.9.7	22.03.2023	SB2021082322 SB2023032239 SB2023050815 and 11 more
#VU73955 - Server-Side Request Forgery (SSRF) CVE-2021-39150	CWE-918	High	Available	No	6.0.3.9.7	22.03.2023	SB2021082322 SB2023032239 SB2023050815 and 11 more
#VU73954 - Deserialization of Untrusted Data CVE-2021-39151	CWE-502	High	No	No	6.0.3.9.7	22.03.2023	SB2021082322 SB2023032239 SB2023050815 and 11 more
#VU73953 - Deserialization of Untrusted Data CVE-2021-39149	CWE-502	High	No	No	6.0.3.9.7	22.03.2023	SB2021082322 SB2023032239 SB2023050815 and 11 more
#VU73951 - Deserialization of Untrusted Data CVE-2021-39148	CWE-502	High	No	No	6.0.3.9.7	22.03.2023	SB2021082322 SB2023032239 SB2023050815 and 11 more
#VU73950 - Deserialization of Untrusted Data CVE-2021-39147	CWE-502	High	No	No	6.0.3.9.7	22.03.2023	SB2021082322 SB2023032239 SB2023050815 and 11 more
#VU73949 - Deserialization of Untrusted Data CVE-2021-39146	CWE-502	High	No	No	6.0.3.9.7	22.03.2023	SB2021082322 SB2023032239 SB2023050815 and 11 more
#VU73948 - Deserialization of Untrusted Data CVE-2021-39145	CWE-502	High	No	No	6.0.3.9.7	22.03.2023	SB2021082322 SB2023032239 SB2023050815 and 14 more
#VU73946 - Deserialization of Untrusted Data CVE-2021-39141	CWE-502	High	Available	No	6.0.3.9.7	22.03.2023	SB2021082322 SB2023032239 SB2023050815 and 14 more
#VU70527 - Improper input validation CVE-2022-41966	CWE-20	Medium	Available	No	6.0.3.9.7	28.12.2022	SB2022122822 SB2023011211 SB2023020616 and 53 more
#VU69283 - Out-of-bounds write CVE-2022-40151	CWE-787	Medium	No	No	6.0.3.9.7	14.11.2022	SB2022111420 SB2022122822 SB2023012670 and 32 more
#VU68720 - Improper Control of Generation of Code ('Code Injection') CVE-2021-39144	CWE-94	Critical	Available	Exploited	6.0.3.9.7	25.10.2022	SB2021082322 SB2022102568 SB2023031801 and 17 more
#VU62511 - Improper input validation CVE-2021-39140	CWE-20	Medium	No	No	6.0.3.9.7	22.04.2022	SB2022042257 SB2023012518 SB2023032239 and 15 more
#VU60527 - Resource exhaustion CVE-2021-43859	CWE-400	Medium	No	No	6.0.3.9.7	11.02.2022	SB2022021102 SB2022021103 SB2022042250 and 26 more
#VU60089 - Improper input validation CVE-2021-39153	CWE-20	High	No	No	6.0.3.9.7	27.01.2022	SB2022012755 SB2022042262 SB2023032239 and 13 more
#VU59813 - Improper input validation CVE-2021-39139	CWE-20	High	No	No	6.0.3.9.7	19.01.2022	SB2022011911 SB2022011912 SB2022012325 and 21 more
#VU59701 - Improper input validation CVE-2021-39154	CWE-20	High	No	No	6.0.3.9.7	18.01.2022	SB2022011835 SB2023032239 SB2023050815 and 12 more