Known vulnerabilities in Big Replicate LiveData Migrator

Known vulnerabilities in Big Replicate LiveData Migrator

Vendor: IBM Corporation

Software: Big Replicate LiveData Migrator

Software CPE: cpe:2.3:a:ibm_corporation:big_replicate_livedata_migrator:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 17

Public exploits: 3

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (17)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU117682 - Resource exhaustion CVE-2025-61795	CWE-400	Medium	No	No	3.4	27.10.2025	SB2025102749 SB20251031122 SB20251031123 and 40 more
#VU117681 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-55752	CWE-22	High	Available	No	3.4	27.10.2025	SB2025102748 SB20251031122 SB20251031123 and 43 more
#VU117680 - Improper Output Neutralization for Logs CVE-2025-55754	CWE-117	Low	No	No	3.4	27.10.2025	SB2025102748 SB20251031122 SB20251031123 and 28 more
#VU99975 - Authentication Bypass by Spoofing CVE-2024-51504	CWE-290	High	No	No	3.2.1	06.11.2024	SB2024110667 SB2024121231 SB2024122015 and 12 more
#VU99350 - Missing release of memory after effective lifetime CVE-2024-36114	CWE-401	Medium	No	No	3.4	25.10.2024	SB2024102535 SB2024121139 SB2025012230 and 5 more
#VU99267 - Improper Authorization CVE-2024-38821	CWE-285	Medium	Available	No	3.2.1	23.10.2024	SB2024102307 SB2024112849 SB2024112910 and 13 more
#VU75409 - Improper input validation CVE-2023-20863	CWE-20	Medium	No	No	3.2.1	21.04.2023	SB2023042131 SB2023042132 SB2023050511 and 88 more
#VU65655 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-10172	CWE-611	Medium	No	No	3.4	21.07.2022	SB2022072128 SB2021021828 SB2023042803 and 19 more
#VU27703 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2016-3720	CWE-611	High	No	No	3.4	12.05.2020	SB2016061003 SB2022101121 SB2021091803 and 8 more
#VU21470 - Improper input validation CVE-2019-10202	CWE-20	High	No	No	3.4	01.10.2019	SB2019100116 SB2019100117 SB2019100118 and 25 more
#VU19941 - Exposure of sensitive information to an unauthorized actor CVE-2019-12086	CWE-200	Medium	No	No	3.4	06.08.2019	SB2019052407 SB2019092703 SB2019100116 and 32 more
#VU16786 - Improper input validation CVE-2018-1000873	CWE-20	Low	No	No	3.4	04.01.2019	SB2018122016 SB2023022124 SB2021022238 and 7 more
#VU11268 - Deserialization of Untrusted Data CVE-2018-7489	CWE-502	High	No	No	3.4	26.03.2018	SB2018021604 SB2018041910 SB2018050306 and 29 more
#VU10610 - Deserialization of Untrusted Data CVE-2018-5968	CWE-502	High	No	No	3.4	16.02.2018	SB2018021604 SB2018021605 SB2018051725 and 15 more
#VU10257 - Deserialization of Untrusted Data CVE-2017-17485	CWE-502	High	No	No	3.4	26.01.2018	SB2017121218 SB2018021605 SB2018051725 and 25 more
#VU9607 - Improper input validation CVE-2017-15095	CWE-20	High	No	No	3.4	08.12.2017	SB2017121101 SB2017111609 SB2018051424 and 29 more
#VU9128 - Deserialization of Untrusted Data CVE-2017-7525	CWE-502	High	Available	No	3.4	08.11.2017	SB2017110807 SB2017102005 SB2017120205 and 41 more