Known vulnerabilities in Atlas eDiscovery Process Management

Vendor: IBM Corporation
Software: Atlas eDiscovery Process Management
Software CPE: cpe:2.3:a:ibm_corporation:atlas_ediscovery_process_management:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 27
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Atlas eDiscovery Process Management Atlas eDiscovery Process Management is affected by 27 known vulnerabilities: 1 critical, 14 high, 10 medium, 2 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86821 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2009-2625		 CWE-835 Medium
No
No
 6.0.3.9.7 27.02.2024 SB2024022724
SB2024030723
SB2024030833
and 12 more
#VU86355 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2017-5644		 CWE-776 Low
No
No
 6.0.3.9.7 13.02.2024 SB2024021305
SB2024022312
SB2024022724
and 5 more
#VU86352 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2014-3574		 CWE-611 Medium
No
No
 6.0.3.9.7 13.02.2024 SB2024021305
SB2024022312
SB2014090409
and 2 more
#VU86349 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2014-3529		 CWE-611 Medium
No
No
 6.0.3.9.7 13.02.2024 SB2024021305
SB2024022312
SB2014090409
and 2 more
#VU73954 - Deserialization of Untrusted Data
CVE-2021-39151		 CWE-502 High
No
No
 6.0.3.9.7 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73953 - Deserialization of Untrusted Data
CVE-2021-39149		 CWE-502 High
No
No
 6.0.3.9.7 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73951 - Deserialization of Untrusted Data
CVE-2021-39148		 CWE-502 High
No
No
 6.0.3.9.7 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73949 - Deserialization of Untrusted Data
CVE-2021-39146		 CWE-502 High
No
No
 6.0.3.9.7 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73946 - Deserialization of Untrusted Data
CVE-2021-39141		 CWE-502 High
Available
No
 6.0.3.9.7 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 14 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 6.0.3.9.7 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU62511 - Improper input validation
CVE-2021-39140		 CWE-20 Medium
No
No
 6.0.3.9.7 22.04.2022 SB2022042257
SB2023012518
SB2023032239
and 15 more
#VU60527 - Resource exhaustion
CVE-2021-43859		 CWE-400 Medium
No
No
 6.0.3.9.7 11.02.2022 SB2022021102
SB2022021103
SB2022042250
and 26 more
#VU60089 - Improper input validation
CVE-2021-39153		 CWE-20 High
No
No
 6.0.3.9.7 27.01.2022 SB2022012755
SB2022042262
SB2023032239
and 13 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 6.0.3.9.7 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU59813 - Improper input validation
CVE-2021-39139		 CWE-20 High
No
No
 6.0.3.9.7 19.01.2022 SB2022011911
SB2022011912
SB2022012325
and 21 more
#VU55416 - Improper input validation
CVE-2012-0881		 CWE-20 Medium
No
No
 6.0.3.9.7 28.07.2021 SB2021072822
SB2023070731
SB2023102710
and 19 more
#VU49517 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2021-23926		 CWE-776 High
No
No
 6.0.3.9.7 14.01.2021 SB2021011401
SB2022072039
SB2022081823
and 21 more
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683		 CWE-749 Medium
No
No
 6.0.3.9.7 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415		 CWE-611 High
No
No
 6.0.3.9.7 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more
#VU14515 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1000632		 CWE-611 Low
No
No
 6.0.3.9.7 21.08.2018 SB2018082321
SB2018120722
SB2018121006
and 20 more


Showing elements 1 - 20 out of 27