Known vulnerabilities in Business Monitor

Vendor: IBM Corporation
Software: Business Monitor
Software CPE: cpe:2.3:a:ibm_corporation:business_monitor:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 24
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Business Monitor Business Monitor is affected by 24 known vulnerabilities: 2 critical, 3 high, 12 medium, 7 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116602 - Allocation of Resources Without Limits or Throttling
CVE-2025-36099		 CWE-770 Low
No
No
 - 06.10.2025 SB2025100614
SB2025100616
SB2025100618
and 14 more
#VU113074 - Stack-based buffer overflow
CVE-2025-36097		 CWE-121 High
No
No
 - 18.07.2025 SB20250718100
SB2025072128
SB2025072307
and 43 more
#VU111988 - Deserialization of Untrusted Data
CVE-2025-36038		 CWE-502 Critical
No
No
 - 27.06.2025 SB2025062708
SB2025063083
SB2025070944
and 14 more
#VU109860 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-33104		 CWE-79 Low
No
No
 - 27.05.2025 SB2025052752
SB2025052753
SB2025052908
and 6 more
#VU107856 - Server-Side Request Forgery (SSRF)
CVE-2025-27907		 CWE-918 Medium
No
No
 - 23.04.2025 SB2025042309
SB2025042318
SB2025042345
and 11 more
#VU100521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45087		 CWE-79 Medium
No
No
 - 15.11.2024 SB2024111525
SB2024112217
SB2024112515
and 6 more
#VU99760 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45086		 CWE-611 Medium
No
No
 - 05.11.2024 SB2024110544
SB2024110623
SB2024110629
and 8 more
#VU99280 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45071		 CWE-79 Low
No
No
 - 23.10.2024 SB2024102327
SB2024102343
SB2024102353
and 11 more
#VU98810 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45072		 CWE-611 Medium
No
No
 - 18.10.2024 SB2024101807
SB2024101813
SB20241022399
and 11 more
#VU98730 - Improper input validation
CVE-2024-45085		 CWE-20 Medium
No
No
 - 16.10.2024 SB2024101654
SB2024101816
SB2024101820
and 8 more
#VU98136 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45073		 CWE-79 Low
No
No
 - 08.10.2024 SB2024100833
SB2024100834
SB2024100942
and 12 more
#VU96059 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50315		 CWE-200 Low
No
No
 - 15.08.2024 SB2024081567
SB2024082831
SB2024082846
and 9 more
#VU95625 - Improper input validation
CVE-2024-35154		 CWE-20 Low
No
No
 - 09.08.2024 SB2024080941
SB2024081324
SB2024081439
and 11 more
#VU94637 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-37532		 CWE-451 Medium
No
No
 - 22.07.2024 SB2024072221
SB2024072222
SB2024072306
and 14 more
#VU93396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-35153		 CWE-79 Medium
No
No
 - 26.06.2024 SB2024062690
SB2024062708
SB2024062717
and 12 more
#VU88977 - Resource exhaustion
CVE-2024-25026		 CWE-400 Medium
No
No
 - 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 - 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354		 CWE-611 High
No
No
 - 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 - 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU88120 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50313		 CWE-327 Low
No
No
 - 04.04.2024 SB2024040414
SB2024040415
SB2024040439
and 16 more


Showing elements 1 - 20 out of 24