Known vulnerabilities in DataPower Operations Dashboard - page 2

Vendor: IBM Corporation
Software: DataPower Operations Dashboard
Software CPE: cpe:2.3:a:ibm_corporation:datapower_operations_dashboard:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 46
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DataPower Operations Dashboard DataPower Operations Dashboard is affected by 46 known vulnerabilities: 2 critical, 3 high, 38 medium, 3 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573		 CWE-918 Medium
No
No
 1.0.22.0 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93544 - Improper input validation
CVE-2024-38477		 CWE-20 Medium
No
No
 1.0.22.0 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU93541 - Improper input validation
CVE-2024-38474		 CWE-20 Medium
No
No
 1.0.22.0 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 57 more
#VU93540 - Improper input validation
CVE-2024-38473		 CWE-20 Medium
Available
No
 1.0.22.0 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 1.0.21.0 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU86900 - Improper input validation
CVE-2024-21742		 CWE-20 Medium
No
No
 1.0.21.0 28.02.2024 SB2024022829
SB2024032934
SB2024042476
and 12 more
#VU86374 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-46308		 CWE-1321 High
No
No
 1.0.20.1 13.02.2024 SB2024021316
SB2024021609
SB2024031413
and 1 more
#VU86290 - Stack-based buffer overflow
CVE-2023-51074		 CWE-121 Medium
No
No
 1.0.20.2 09.02.2024 SB2024020912
SB2024021238
SB2024021241
and 37 more
#VU85874 - Resource exhaustion
CVE-2023-33202		 CWE-400 Medium
No
No
 1.0.20.1 29.01.2024 SB2024012929
SB2024012930
SB2024013106
and 19 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 1.0.20.1 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 1.0.20.2 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU82690 - Deserialization of Untrusted Data
CVE-2023-46604		 CWE-502 Critical
Available
Exploited
 1.0.20.0 02.11.2023 SB2023110251
SB2023111311
SB2023112410
and 36 more
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642		 CWE-770 Medium
No
No
 1.0.20.1 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 1.0.20.0 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU80874 - Stack-based buffer overflow
CVE-2023-31419		 CWE-121 Medium
Available
No
 1.0.20.1 19.09.2023 SB2023091904
SB2023112014
SB2024020625
and 3 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635		 CWE-681 Medium
No
No
 1.0.20.1 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU80782 - Deserialization of Untrusted Data
CVE-2023-33008		 CWE-502 Medium
No
No
 1.0.20.0 14.09.2023 SB2023091430
SB2023091522
SB2023092111
and 8 more
#VU77622 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34981		 CWE-200 Medium
No
No
 1.0.20.0 22.06.2023 SB2023062241
SB2023070714
SB2023071901
and 24 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 1.0.20.0 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU73703 - Exposure of sensitive information to an unauthorized actor
CVE-2023-0833		 CWE-200 Low
No
No
 1.0.20.1 15.03.2023 SB2023031511
SB2023051919
SB2024031230
and 8 more


Showing elements 21 - 40 out of 46