Known vulnerabilities in IBM Cloud Pak for Multicloud Management - page 14

Vendor: IBM Corporation
Software: IBM Cloud Pak for Multicloud Management
Software CPE: cpe:2.3:a:ibm_corporation:cp-management:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 345
Public exploits: 20
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak for Multicloud Management IBM Cloud Pak for Multicloud Management is affected by 345 known vulnerabilities: 8 critical, 97 high, 161 medium, 79 low Critical High Medium Low

Vulnerabilities (345)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83930 - NULL Pointer Dereference
CVE-2023-49083		 CWE-476 Medium
No
No
 2.3.8 06.12.2023 SB2023120655
SB2023120656
SB2023121440
and 63 more
#VU83242 - Resource exhaustion
CVE-2023-43646		 CWE-400 Medium
No
No
 2.3.8 17.11.2023 SB2023111725
SB2024010322
SB2024013046
and 5 more
#VU82979 - Exposure of sensitive information to an unauthorized actor
CVE-2018-25091		 CWE-200 Medium
No
No
 2.3.8 10.11.2023 SB2023111039
SB2023111040
SB2023111048
and 13 more
#VU82548 - Inefficient Algorithmic Complexity
CVE-2023-46136		 CWE-407 Medium
No
No
 2.3.8 30.10.2023 SB2023103003
SB2023103183
SB2023112907
and 73 more
#VU81056 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41040		 CWE-22 Low
No
No
 2.3.8 22.09.2023 SB2023092227
SB2023102621
SB2023110908
and 6 more
#VU79799 - Inefficient Regular Expression Complexity
CVE-2023-26115		 CWE-1333 Medium
No
No
 2.3.8 21.08.2023 SB2023082199
SB20230821104
SB2023082858
and 21 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 2.3.8 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU75664 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30861		 CWE-200 Medium
No
No
 2.3.8 02.05.2023 SB2023050221
SB2023052227
SB2023052228
and 44 more
#VU74469 - Unprotected Alternate Channel
CVE-2023-28842		 CWE-420 Medium
No
No
 2.3.8 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 19 more
#VU74468 - Unprotected Alternate Channel
CVE-2023-28840		 CWE-420 Medium
No
No
 2.3.8 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 20 more
#VU74199 - Improper input validation
CVE-2023-27539		 CWE-20 Medium
No
No
 2.3.8 30.03.2023 SB2023033030
SB2023033041
SB2023041727
and 18 more
#VU72886 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-41721		 CWE-444 Medium
No
No
 2.3.8 06.03.2023 SB2023030655
SB2023030656
SB2023030657
and 39 more
#VU72340 - Improper input validation
CVE-2023-23934		 CWE-20 Low
No
No
 2.3.8 16.02.2023 SB2023021673
SB2023031332
SB2023031613
and 33 more
#VU72339 - Resource exhaustion
CVE-2023-25577		 CWE-400 Medium
No
No
 2.3.8 16.02.2023 SB2023021673
SB2023022875
SB2023031332
and 49 more
#VU72321 - Improper Privilege Management
CVE-2022-36109		 CWE-269 Low
No
No
 2.3.8 16.02.2023 SB2023021619
SB2023021620
SB2023031742
and 14 more
#VU72036 - Error Handling
CVE-2023-23931		 CWE-388 Low
No
No
 2.3.8 08.02.2023 SB2023020813
SB2023030952
SB2023031419
and 68 more
#VU70121 - Incorrect Regular Expression
CVE-2022-37603		 CWE-185 Medium
No
No
 2.3.8 12.12.2022 SB2022121221
SB2022121222
SB2023010418
and 29 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 2.3.8 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66070 - Resource exhaustion
CVE-2022-30633		 CWE-400 Medium
No
No
 2.3.8 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU64001 - Heap-based Buffer Overflow
CVE-2022-24795		 CWE-122 Medium
No
No
 2.3.8 06.06.2022 SB2022061543
SB2022090745
SB2022110845
and 16 more


Showing elements 261 - 280 out of 345