Known vulnerabilities in IBM Cloud Pak for Multicloud Management - page 16

Vendor: IBM Corporation
Software: IBM Cloud Pak for Multicloud Management
Software CPE: cpe:2.3:a:ibm_corporation:cp-management:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 345
Public exploits: 20
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak for Multicloud Management IBM Cloud Pak for Multicloud Management is affected by 345 known vulnerabilities: 8 critical, 97 high, 161 medium, 79 low Critical High Medium Low

Vulnerabilities (345)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83545 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-46337		 CWE-90 High
No
No
 2.3.8 28.11.2023 SB2023112861
SB2024011806
SB2024020107
and 34 more
#VU82969 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-41419		 CWE-444 Medium
No
No
 2.3.8 10.11.2023 SB2023111023
SB2023111029
SB2023111031
and 17 more
#VU80473 - Untrusted Search Path
CVE-2023-40590		 CWE-426 Medium
No
No
 2.3.8 05.09.2023 SB2023090562
SB2024022927
#VU80135 - Security Features
CVE-2023-37466		 CWE-254 High
Available
No
 2.3.8 30.08.2023 SB2023083012
SB2023083025
SB2023083028
and 7 more
#VU79504 - Security Features
CVE-2023-37903		 CWE-254 Medium
No
No
 2.3.8 15.08.2023 SB2023081515
SB2023081517
SB2023081602
and 9 more
#VU76605 - Uncaught Exception
CVE-2023-2251		 CWE-248 Medium
No
No
 2.3.8 29.05.2023 SB2023052918
SB2023060126
SB2023062140
and 9 more
#VU76527 - Security Features
CVE-2023-32314		 CWE-254 High
No
No
 2.3.8 25.05.2023 SB2023052543
SB2023052545
SB2023052546
and 8 more
#VU76041 - Permissions, Privileges, and Access Controls
CVE-2023-2454		 CWE-264 Medium
No
No
 2.3.8 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 55 more
#VU76005 - Resource Management Errors
CVE-2023-0475		 CWE-399 Medium
No
No
 2.3.8 10.05.2023 SB2023051068
SB2023051069
SB2024022927
and 1 more
#VU75888 - Integer overflow
CVE-2023-2004		 CWE-190 High
No
No
 2.3.8 09.05.2023 SB2023050976
SB2023050989
SB2023060845
and 34 more
#VU75603 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-0842		 CWE-1321 Medium
No
No
 2.3.8 01.05.2023 SB2023050113
SB2023050917
SB2023052413
and 12 more
#VU75512 - Improper Authorization
CVE-2021-28235		 CWE-285 High
No
No
 2.3.8 26.04.2023 SB2023042619
SB2023052901
SB2023052902
and 10 more
#VU72101 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-36313		 CWE-835 Medium
No
No
 2.3.8 09.02.2023 SB2023020967
SB2023020968
SB2023112078
and 2 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 2.3.8 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 2.3.8 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU71137 - Incorrect Regular Expression
CVE-2022-40899		 CWE-185 Medium
No
No
 2.3.8 12.01.2023 SB2023011234
SB2023011239
SB2023011240
and 26 more
#VU69675 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24999		 CWE-94 Medium
Available
No
 2.3.8 29.11.2022 SB2022112910
SB2022112911
SB2022112943
and 49 more
#VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2022-43548		 CWE-350 Medium
No
No
 2.3.8 15.11.2022 SB2022111599
SB20221115101
SB20221115102
and 47 more
#VU68442 - Improper input validation
CVE-2022-21619		 CWE-20 Low
No
No
 2.3.8 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 140 more
#VU65498 - Improper input validation
CVE-2022-21549		 CWE-20 Medium
No
No
 2.3.8 20.07.2022 SB2022072046
SB2022072047
SB2022072735
and 34 more


Showing elements 301 - 320 out of 345