Known vulnerabilities in IBM Cloud Pak for Multicloud Management - page 15

Vendor: IBM Corporation
Software: IBM Cloud Pak for Multicloud Management
Software CPE: cpe:2.3:a:ibm_corporation:cp-management:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 345
Public exploits: 20
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak for Multicloud Management IBM Cloud Pak for Multicloud Management is affected by 345 known vulnerabilities: 8 critical, 97 high, 161 medium, 79 low Critical High Medium Low

Vulnerabilities (345)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86917 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2021-4264		 CWE-1321 Medium
No
No
 2.3.8 29.02.2024 SB2024022927
SB2026062620
#VU82558 - Cross-Site Request Forgery (CSRF)
CVE-2023-45857		 CWE-352 Low
No
No
 2.3.8 30.10.2023 SB2023103024
SB2023113014
SB2023121224
and 41 more
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609		 CWE-502 High
No
No
 2.3.8 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU78506 - Heap-based Buffer Overflow
CVE-2022-24834		 CWE-122 Medium
Available
No
 2.3.8 21.07.2023 SB2023072126
SB2023072127
SB2023072128
and 21 more
#VU74467 - Missing Encryption of Sensitive Data
CVE-2023-28841		 CWE-311 Medium
No
No
 2.3.8 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 18 more
#VU72123 - Deserialization of Untrusted Data
CVE-2023-25194		 CWE-502 Low
Available
No
 2.3.8 11.02.2023 SB2023021101
SB2023030952
SB2023040419
and 40 more
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 2.3.8 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717		 CWE-770 Medium
Available
No
 2.3.8 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU70119 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-41915		 CWE-113 Medium
No
No
 2.3.8 12.12.2022 SB2022121215
SB2023011210
SB2023013027
and 25 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 2.3.8 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU68844 - Type confusion
CVE-2022-3676		 CWE-843 Medium
No
No
 2.3.8 31.10.2022 SB2022103129
SB2022111110
SB2022111724
and 60 more
#VU68437 - Improper input validation
CVE-2022-21628		 CWE-20 Medium
No
No
 2.3.8 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 138 more
#VU68438 - Improper input validation
CVE-2022-21626		 CWE-20 Medium
No
No
 2.3.8 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68439 - Improper input validation
CVE-2022-21618		 CWE-20 Medium
No
No
 2.3.8 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 60 more
#VU68440 - Improper input validation
CVE-2022-39399		 CWE-20 Low
No
No
 2.3.8 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 61 more
#VU68441 - Improper input validation
CVE-2022-21624		 CWE-20 Low
No
No
 2.3.8 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU65495 - Improper input validation
CVE-2022-34169		 CWE-20 High
Available
No
 2.3.8 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU62692 - NULL Pointer Dereference
CVE-2022-24736		 CWE-476 Medium
No
No
 2.3.8 29.04.2022 SB2022042901
SB2022060701
SB2022092953
and 15 more
#VU62595 - Missing Authentication for Critical Function
CVE-2022-24706		 CWE-306 High
Available
Exploited
 2.3.8 26.04.2022 SB2022042615
SB2024022927
SB20240620116
#VU50367 - Covert Timing Channel
CVE-2020-25659		 CWE-385 Medium
No
No
 2.3.8 11.01.2021 SB2020111230
SB2021052024
SB2021060319
and 18 more


Showing elements 281 - 300 out of 345