Known vulnerabilities in Control Desk

Software: Control Desk
Software CPE: cpe:2.3:a:ibm_corporation:control_desk:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Control Desk Control Desk is affected by 12 known vulnerabilities: 1 critical, 2 high, 8 medium, 1 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113074 - Stack-based buffer overflow
CVE-2025-36097
CWE-121 High
No
No
- 18.07.2025 SB20250718100
SB2025072128
SB2025072307
and 43 more
#VU111988 - Deserialization of Untrusted Data
CVE-2025-36038
CWE-502 Critical
No
No
- 27.06.2025 SB2025062708
SB2025063083
SB2025070944
and 14 more
#VU106045 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22329
CWE-200 Medium
No
No
- 26.03.2025 SB2022110609
#VU106044 - Incorrect Permission Assignment for Critical Resource
CVE-2022-22330
CWE-732 Medium
No
No
- 26.03.2025 SB2022122178
#VU80908 - Resource Management Errors
CVE-2015-5262
CWE-399 Medium
No
No
- 20.09.2023 SB2023092013
SB2023092037
SB2023092123
and 11 more
#VU80741 - Improper Certificate Validation
CVE-2012-5783
CWE-295 Medium
No
No
- 13.09.2023 SB2023091335
SB2023091521
SB2023092013
and 20 more
#VU77628 - Improper input validation
CVE-2012-6153
CWE-20 Medium
No
No
- 22.06.2023 SB2023062250
SB2023092013
SB2023092037
and 15 more
#VU57150 - Improper Certificate Validation
CVE-2014-3577
CWE-295 Low
No
No
- 08.10.2021 SB2014082106
SB2021100807
SB2023020872
and 24 more
#VU50833 - Permissions, Privileges, and Access Controls
CVE-2020-28481
CWE-264 Medium
No
No
- 22.02.2021 SB2021022214
SB2023110624
#VU23383 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14863
CWE-79 Medium
No
No
- 04.12.2019 SB2019022306
SB2022090718
SB2023060626
and 6 more
#VU23382 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10768
CWE-79 Medium
No
No
- 04.12.2019 SB2019120407
SB2022090718
SB2022120810
and 11 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415
CWE-611 High
No
No
- 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 41 more