Known vulnerabilities in Cloudera Observability with IBM - page 6

Vendor: IBM Corporation
Software: Cloudera Observability with IBM
Software CPE: cpe:2.3:a:ibm_corporation:cloudera_observability_with_ibm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 131
Public exploits: 28
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cloudera Observability with IBM Cloudera Observability with IBM is affected by 131 known vulnerabilities: 1 critical, 55 high, 57 medium, 18 low Critical High Medium Low

Vulnerabilities (131)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 - 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU94820 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2014-125087		 CWE-611 High
No
No
 - 29.07.2024 SB2024072906
SB2024072908
SB2024082841
and 1 more
#VU78721 - Improper Privilege Management
CVE-2023-22946		 CWE-269 High
No
No
 - 27.07.2023 SB2023072730
SB2023090130
SB2023091827
and 5 more
#VU69670 - Improper input validation
CVE-2022-3509		 CWE-20 Medium
No
No
 - 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 - 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU68906 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31777		 CWE-79 Medium
No
No
 3.5.3 01.11.2022 SB2022110151
SB2023020922
SB2023050803
and 3 more
#VU65470 - Improper input validation
CVE-2021-38296		 CWE-20 Medium
No
No
 - 19.07.2022 SB2022072013
SB2022092339
SB2022032606
and 1 more
#VU65380 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-33891		 CWE-78 Medium
Available
Exploited
 - 18.07.2022 SB2022071809
SB2023011157
SB2023102324
and 1 more
#VU60181 - Resource Management Errors
CVE-2021-22569		 CWE-399 Medium
Available
No
 - 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more
#VU51876 - Resource exhaustion
CVE-2021-28165		 CWE-400 Medium
No
No
 - 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU49368 - Deserialization of Untrusted Data
CVE-2020-36179		 CWE-502 High
No
No
 3.6.2 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 18 more
#VU49370 - Deserialization of Untrusted Data
CVE-2020-36182		 CWE-502 High
No
No
 3.6.2 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 17 more
#VU49377 - Deserialization of Untrusted Data
CVE-2020-36189		 CWE-502 High
No
No
 3.6.2 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 17 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 3.6.2 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU29129 - Deserialization of Untrusted Data
CVE-2020-14060		 CWE-502 High
No
No
 3.6.2 18.06.2020 SB2020061806
SB2020070320
SB2020073033
and 15 more
#VU21136 - Exposure of sensitive information to an unauthorized actor
CVE-2019-16335		 CWE-200 Medium
No
No
 3.6.2 16.09.2019 SB2019091616
SB2019100716
SB2019102422
and 21 more
#VU21135 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14540		 CWE-200 Medium
Available
No
 3.6.2 16.09.2019 SB2019091616
SB2019100716
SB2019102422
and 23 more
#VU20291 - Cleartext Storage of Sensitive Information
CVE-2019-10099		 CWE-312 Low
No
No
 - 14.08.2019 SB2019081422
SB2025082547
#VU15993 - Improper input validation
CVE-2018-17190		 CWE-20 Medium
No
No
 3.5.3 20.11.2018 SB2018112114
SB2019032817
SB2024060410
and 1 more
#VU14426 - Permissions, Privileges, and Access Controls
CVE-2018-11770		 CWE-264 Low
Available
No
 - 15.08.2018 SB2018081606
SB2024060410
SB2025082547


Showing elements 101 - 120 out of 131