Known vulnerabilities in Cloudera Observability with IBM - page 3

Vendor: IBM Corporation
Software: Cloudera Observability with IBM
Software CPE: cpe:2.3:a:ibm_corporation:cloudera_observability_with_ibm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 131
Public exploits: 28
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cloudera Observability with IBM Cloudera Observability with IBM is affected by 131 known vulnerabilities: 1 critical, 55 high, 57 medium, 18 low Critical High Medium Low

Vulnerabilities (131)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114443 - Session Fixation
CVE-2025-55668		 CWE-384 Medium
No
No
 3.6.2 26.08.2025 SB2025082650
SB2025082651
SB2025090566
and 15 more
#VU114024 - Resource exhaustion
CVE-2025-48989		 CWE-400 Medium
No
No
 3.6.2 13.08.2025 SB2025081375
SB2025081376
SB20250820127
and 49 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 3.6.2 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU111161 - Resource exhaustion
CVE-2025-48988		 CWE-400 Medium
Available
No
 3.6.2 16.06.2025 SB2025061634
SB2025061927
SB20250620145
and 40 more
#VU111159 - Improper Protection of Alternate Path
CVE-2025-49125		 CWE-424 Medium
No
No
 3.6.2 16.06.2025 SB2025061634
SB2025061927
SB20250620145
and 35 more
#VU109959 - Improper Handling of Case Sensitivity
CVE-2025-46701		 CWE-178 Low
Available
No
 3.6.2 30.05.2025 SB2025053002
SB2025061335
SB2025062313
and 22 more
#VU107996 - Error Handling
CVE-2025-31650		 CWE-388 Medium
Available
No
 3.6.2 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 38 more
#VU107995 - Improper input validation
CVE-2025-31651		 CWE-20 Medium
Available
No
 3.6.2 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 46 more
#VU105485 - Improper input validation
CVE-2025-24813		 CWE-20 Critical
Available
Exploited
 3.6.2 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU101814 - Permissions, Privileges, and Access Controls
CVE-2024-50379		 CWE-264 Medium
Available
No
 3.6.2 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 57 more
#VU100588 - Improper Authentication
CVE-2024-52316		 CWE-287 Low
No
No
 3.6.2 18.11.2024 SB2024111823
SB2024112550
SB2024112832
and 36 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819		 CWE-22 Medium
Available
No
 3.6.2 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU19943 - Deserialization of Untrusted Data
CVE-2018-12023		 CWE-502 Medium
No
No
 3.6.2 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 20 more
#VU19938 - Deserialization of Untrusted Data
CVE-2018-11307		 CWE-502 High
No
No
 3.6.2 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 17 more
#VU17781 - Improper input validation
CVE-2018-19362		 CWE-20 High
No
No
 3.6.2 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 38 more
#VU17778 - Improper input validation
CVE-2018-14719		 CWE-20 High
No
No
 3.6.2 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 22 more
#VU17777 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-14720		 CWE-611 Low
No
No
 3.6.2 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 21 more
#VU17776 - Server-Side Request Forgery (SSRF)
CVE-2018-14721		 CWE-918 Low
No
No
 3.6.2 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 23 more
#VU17053 - Permissions, Privileges, and Access Controls
CVE-2018-14718		 CWE-264 High
No
No
 3.6.2 17.01.2019 SB2019011703
SB2019052407
SB2019091718
and 29 more
#VU9128 - Deserialization of Untrusted Data
CVE-2017-7525		 CWE-502 High
Available
No
 3.6.2 08.11.2017 SB2017110807
SB2017102005
SB2017120205
and 39 more


Showing elements 41 - 60 out of 131