Known vulnerabilities in IBM Cloud Pak for Multicloud Management - page 13

Vendor: IBM Corporation
Software: IBM Cloud Pak for Multicloud Management
Software CPE: cpe:2.3:a:ibm_corporation:cp-management:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 345
Public exploits: 20
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak for Multicloud Management IBM Cloud Pak for Multicloud Management is affected by 345 known vulnerabilities: 8 critical, 97 high, 161 medium, 79 low Critical High Medium Low

Vulnerabilities (345)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80099 - Cleartext Storage of Sensitive Information
CVE-2023-4580		 CWE-312 Low
No
No
 2.3.8 29.08.2023 SB2023082927
SB2023083008
SB2023083108
and 29 more
#VU80098 - Resource exhaustion
CVE-2023-4578		 CWE-400 Medium
No
No
 2.3.8 29.08.2023 SB2023082927
SB2023083008
SB2023083108
and 29 more
#VU80097 - Memory corruption
CVE-2023-4577		 CWE-119 High
No
No
 2.3.8 29.08.2023 SB2023082927
SB2023083008
SB2023083108
and 29 more
#VU80094 - Insufficient UI Warning of Dangerous Operations
CVE-2023-4581		 CWE-357 Low
No
No
 2.3.8 29.08.2023 SB2023082927
SB2023083008
SB2023083105
and 37 more
#VU80093 - Integer overflow
CVE-2023-4576		 CWE-190 High
No
No
 2.3.8 29.08.2023 SB2023082927
SB2023083108
SB2023083113
and 8 more
#VU80092 - Use After Free
CVE-2023-4575		 CWE-416 High
No
No
 2.3.8 29.08.2023 SB2023082927
SB2023083008
SB2023083105
and 37 more
#VU80091 - Use After Free
CVE-2023-4574		 CWE-416 High
No
No
 2.3.8 29.08.2023 SB2023082927
SB2023083008
SB2023083105
and 37 more
#VU79631 - Improper input validation
CVE-2023-40267		 CWE-20 High
No
No
 2.3.8 16.08.2023 SB2023081631
SB20230821206
SB20230821207
and 9 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 2.3.8 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU73244 - Resource exhaustion
CVE-2023-26464		 CWE-400 Medium
No
No
 2.3.8 10.03.2023 SB2023031040
SB2023032716
SB2023050514
and 22 more
#VU71287 - Improper input validation
CVE-2023-21835		 CWE-20 Medium
No
No
 2.3.8 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 67 more
#VU66181 - Session Fixation
CVE-2022-25896		 CWE-384 Medium
No
No
 2.3.8 08.08.2022 SB2022080818
SB2022080819
SB2022110270
and 7 more
#VU66069 - Resource exhaustion
CVE-2022-28131		 CWE-400 Medium
No
No
 2.3.8 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191		 CWE-327 Medium
No
No
 2.3.8 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493		 CWE-502 High
No
No
 2.3.8 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302		 CWE-502 High
No
No
 2.3.8 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 2.3.8 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU58824 - Improper input validation
CVE-2021-44716		 CWE-20 Medium
No
No
 2.3.8 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU27960 - Deserialization of Untrusted Data
CVE-2019-17571		 CWE-502 High
No
No
 2.3.8 18.05.2020 SB2019122027
SB2020051806
SB2020011497
and 28 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488		 CWE-295 Low
No
No
 2.3.8 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more


Showing elements 241 - 260 out of 345