Known vulnerabilities in B2B Advanced Communications - page 2

Vendor: IBM Corporation
Software: B2B Advanced Communications
Software CPE: cpe:2.3:a:ibm_corporation:b2b_advanced_communications:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 48
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting B2B Advanced Communications B2B Advanced Communications is affected by 48 known vulnerabilities: 5 high, 32 medium, 11 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80908 - Resource Management Errors
CVE-2015-5262		 CWE-399 Medium
No
No
 1.0.0.8 20.09.2023 SB2023092013
SB2023092037
SB2023092123
and 11 more
#VU80741 - Improper Certificate Validation
CVE-2012-5783		 CWE-295 Medium
No
No
 1.0.0.8 13.09.2023 SB2023091335
SB2023091521
SB2023092013
and 20 more
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609		 CWE-502 High
No
No
 1.0.0.10 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU78712 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22595		 CWE-79 Medium
No
No
 1.0.0.8 27.07.2023 SB2023072727
#VU78711 - Deserialization of Untrusted Data
CVE-2023-24971		 CWE-502 Medium
No
No
 1.0.0.8 27.07.2023 SB2023072725
#VU78253 - Origin Validation Error
CVE-2019-11777		 CWE-346 Medium
No
No
 1.0.0.10 14.07.2023 SB2023071415
SB2023092720
SB2023092722
and 4 more
#VU77628 - Improper input validation
CVE-2012-6153		 CWE-20 Medium
No
No
 1.0.0.8 22.06.2023 SB2023062250
SB2023092013
SB2023092037
and 15 more
#VU65655 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-10172		 CWE-611 Medium
No
No
 1.0.0.10 21.07.2022 SB2022072128
SB2021021828
SB2023042803
and 18 more
#VU65653 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2014-0114		 CWE-470 Medium
Available
Exploited
 1.0.0.8 21.07.2022 SB2022072128
SB2022090131
SB2022120629
and 14 more
#VU57150 - Improper Certificate Validation
CVE-2014-3577		 CWE-295 Low
No
No
 1.0.0.8 08.10.2021 SB2014082106
SB2021100807
SB2023020872
and 24 more
#VU52578 - Improper input validation
CVE-2017-18640		 CWE-20 Medium
No
No
 1.0.0.8 26.04.2021 SB2021042616
SB2021081922
SB2021060732
and 20 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 1.0.0.8 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU47481 - Improper input validation
CVE-2020-13956		 CWE-20 Medium
No
No
 1.0.0.8 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more
#VU25469 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8840		 CWE-94 Medium
Available
No
 1.0.0.8 19.02.2020 SB2020021921
SB2020022615
SB2020061106
and 18 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 1.0.0.8 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU17778 - Improper input validation
CVE-2018-14719		 CWE-20 High
No
No
 1.0.0.8 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 22 more
#VU17776 - Server-Side Request Forgery (SSRF)
CVE-2018-14721		 CWE-918 Low
No
No
 1.0.0.8 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 23 more
#VU17053 - Permissions, Privileges, and Access Controls
CVE-2018-14718		 CWE-264 High
No
No
 1.0.0.8 17.01.2019 SB2019011703
SB2019052407
SB2019091718
and 29 more
#VU16786 - Improper input validation
CVE-2018-1000873		 CWE-20 Low
No
No
 1.0.0.8 04.01.2019 SB2018122016
SB2023022124
SB2021022238
and 6 more
#VU11268 - Deserialization of Untrusted Data
CVE-2018-7489		 CWE-502 High
No
No
 1.0.0.8 26.03.2018 SB2018021604
SB2018041910
SB2018050306
and 28 more


Showing elements 21 - 40 out of 48