Known vulnerabilities in DataPower Operations Dashboard

Vendor: IBM Corporation
Software: DataPower Operations Dashboard
Software CPE: cpe:2.3:a:ibm_corporation:datapower_operations_dashboard:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 46
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DataPower Operations Dashboard DataPower Operations Dashboard is affected by 46 known vulnerabilities: 2 critical, 3 high, 38 medium, 3 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121014 - Resource exhaustion
CVE-2025-8885		 CWE-400 Medium
No
No
 1.0.23.3 07.01.2026 SB2024050731
SB2026010745
SB2026010827
and 10 more
#VU117682 - Resource exhaustion
CVE-2025-61795		 CWE-400 Medium
No
No
 1.0.23.3 27.10.2025 SB2025102749
SB20251031122
SB20251031123
and 39 more
#VU117436 - Allocation of Resources Without Limits or Throttling
CVE-2025-8916		 CWE-770 Medium
No
No
 1.0.23.3 21.10.2025 SB2025102223
SB2025102241
SB2025102248
and 35 more
#VU116142 - Uncontrolled Recursion
CVE-2025-53864		 CWE-674 Medium
No
No
 1.0.23.2 26.09.2025 SB2025092630
SB2025092631
SB2025100301
and 27 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754		 CWE-770 Medium
Available
No
 1.0.23.3 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 1.0.23.3 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 45 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 1.0.23.3 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 38 more
#VU113811 - Exposure of resource to wrong sphere
CVE-2025-49574		 CWE-668 Low
No
No
 1.0.23.2 12.08.2025 SB2025081226
SB2025100107
SB2025100114
and 9 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 1.0.23.3 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 177 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 1.0.23.3 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more
#VU112166 - Improper Authentication
CVE-2025-49146		 CWE-287 High
No
No
 1.0.23.2 04.07.2025 SB2025070405
SB2025070406
SB2025070708
and 13 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 1.0.23.3 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU106927 - Resource exhaustion
CVE-2025-2240		 CWE-400 Medium
No
No
 1.0.23.2 03.04.2025 SB2025040318
SB2025040326
SB2025040327
and 6 more
#VU105889 - Improper Verification of Cryptographic Signature
CVE-2020-36843		 CWE-347 Medium
No
No
 1.0.23.1 20.03.2025 SB2025032014
SB2025032666
SB2025032919
and 4 more
#VU93543 - Server-Side Request Forgery (SSRF)
CVE-2024-38476		 CWE-918 High
No
No
 1.0.22.0 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 61 more
#VU93542 - Improper input validation
CVE-2024-38475		 CWE-20 Critical
Available
No
 1.0.22.0 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172		 CWE-835 Medium
No
No
 1.0.23.0 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 1.0.23.0 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709		 CWE-113 Medium
No
No
 1.0.23.0 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 62 more
#VU85240 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-11831		 CWE-79 Medium
No
No
 1.0.23.3 09.01.2024 SB2024010997
SB2025021411
SB2025021412
and 17 more


Showing elements 1 - 20 out of 46