Known vulnerabilities in Data Cataloging

Vendor: IBM Corporation
Software: Data Cataloging
Software CPE: cpe:2.3:a:ibm_corporation:data_cataloging:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 24
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Data Cataloging Data Cataloging is affected by 24 known vulnerabilities: 3 high, 15 medium, 6 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139082 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-6321		 CWE-22 Medium
No
No
 2.5.3 22.07.2026 SB2026072227
SB2026072228
SB2026072229
and 11 more
#VU137734 - Improper Authentication
CVE-2026-34531		 CWE-287 High
No
No
 2.5.3 15.07.2026 SB2026071540
SB2026071541
SB2026071550
and 1 more
#VU137406 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32711		 CWE-22 Low
No
No
 2.5.3 14.07.2026 SB2026071436
SB2026071437
SB2026071438
and 2 more
#VU135350 - Improper input validation
CVE-2026-33151		 CWE-20 Medium
No
No
 2.5.3 25.06.2026 SB20260625160
SB2026071417
#VU134929 - Improper input validation
CVE-2025-68470		 CWE-20 Low
No
No
 2.5.3 19.06.2026 SB2026061981
SB2026071420
#VU134928 - Cross-Site Request Forgery (CSRF)
CVE-2026-22030		 CWE-352 Low
No
No
 2.5.3 19.06.2026 SB2026061980
SB2026061987
SB2026071420
#VU129667 - NULL Pointer Dereference
CVE-2026-27141		 CWE-476 Medium
No
No
 2.5.3 05.05.2026 SB2026050532
SB2026052154
SB2026070811
#VU128353 - Resource exhaustion
CVE-2026-34043		 CWE-400 Medium
No
No
 2.5.3 28.04.2026 SB20260428183
SB2026052719
SB2026052720
and 7 more
#VU128152 - Uncontrolled Recursion
CVE-2026-30922		 CWE-674 Medium
No
No
 2.5.3 27.04.2026 SB20260427104
SB20260427114
SB20260427115
and 28 more
#VU126856 - Inefficient Regular Expression Complexity
CVE-2026-4867		 CWE-1333 Low
No
No
 2.5.3 22.04.2026 SB20260422207
SB20260422208
SB2026052938
and 7 more
#VU126548 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-41066		 CWE-611 Medium
No
No
 2.5.3 20.04.2026 SB2026042075
SB2026051813
SB2026060115
and 9 more
#VU125817 - Resource exhaustion
CVE-2026-40192		 CWE-400 Medium
No
No
 2.5.3 11.04.2026 SB2026041113
SB2026041807
SB2026041808
and 8 more
#VU124772 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-22029		 CWE-79 Low
No
No
 2.5.3 01.04.2026 SB2026040154
SB2026040164
SB2026041309
and 10 more
#VU124088 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-21884		 CWE-94 High
No
No
 2.5.3 18.03.2026 SB2026031906
SB20260428180
SB2026061991
and 1 more
#VU123113 - Out-of-bounds write
CVE-2026-25990		 CWE-787 High
No
No
 2.5.3 20.02.2026 SB2026022027
SB2026022028
SB2026022035
and 12 more
#VU122270 - Resource exhaustion
CVE-2026-23490		 CWE-400 Medium
No
No
 2.5.3 03.02.2026 SB2026020365
SB2026020366
SB2026020370
and 52 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 2.5.3 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 89 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 2.5.3 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 88 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 2.5.3 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU111979 - Protection Mechanism Failure
CVE-2025-50181		 CWE-693 Low
No
No
 2.5.3 26.06.2025 SB2025062659
SB2025062660
SB2025062662
and 54 more


Showing elements 1 - 20 out of 24