Known vulnerabilities in DataPower Operations Dashboard - page 3

Known vulnerabilities in DataPower Operations Dashboard - page 3

Vendor: IBM Corporation

Software: DataPower Operations Dashboard

Software CPE: cpe:2.3:a:ibm_corporation:datapower_operations_dashboard:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 55

Public exploits: 8

Known exploited (KEV): 1

Breakdown by Severity Chart

Vulnerabilities (55)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU136625 - Missing Authorization CVE-2026-54475	CWE-862	Low	No	No	1.0.24.0	01.07.2026	SB2026070164 SB2026080301 SB2026102926
#VU136624 - Uncontrolled Memory Allocation CVE-2026-53917	CWE-789	Low	No	No	1.0.24.0	01.07.2026	SB2026070164 SB2026070970 SB2026070971 and 3 more
#VU136621 - Uncontrolled Memory Allocation CVE-2026-50734	CWE-789	Medium	No	No	1.0.24.0	01.07.2026	SB2026070164 SB2026070970 SB2026070971 and 3 more
#VU136618 - Improper input validation CVE-2026-49434	CWE-20	Low	No	No	1.0.24.0	01.07.2026	SB2026070164 SB2026070970 SB2026070971 and 3 more
#VU125804 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2026-2950	CWE-1321	Medium	No	No	1.0.24.0	10.04.2026	SB2026041094 SB2026042049 SB2026042720 and 17 more
#VU125803 - Improper Control of Generation of Code ('Code Injection') CVE-2026-4800	CWE-94	High	No	No	1.0.24.0	10.04.2026	SB2026041094 SB20260410101 SB20260410102 and 66 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-33870	CWE-444	Medium	Available	No	1.0.24.0	25.03.2026	SB2026032533 SB20260415180 SB2026042043 and 25 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2025-13465	CWE-1321	Medium	No	No	1.0.24.0	22.01.2026	SB2026012209 SB2026012701 SB2026012744 and 72 more
#VU81800 - Resource Management Errors CVE-2023-42795	CWE-399	Medium	No	No	1.0.20.0	10.10.2023	SB2023101084 SB2023101122 SB2023101123 and 48 more
#VU77622 - Exposure of sensitive information to an unauthorized actor CVE-2023-34981	CWE-200	Medium	No	No	1.0.20.0	22.06.2023	SB2023062241 SB2023070714 SB2023071901 and 24 more
#VU70119 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2022-41915	CWE-113	Medium	No	No	1.0.19.0	12.12.2022	SB2022121215 SB2023011210 SB2023013027 and 25 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-41881	CWE-835	Medium	No	No	1.0.19.0	12.12.2022	SB2022121215 SB2023011210 SB2023011757 and 74 more
#VU68832 - Resource exhaustion CVE-2022-42004	CWE-400	Medium	No	No	1.0.19.0	31.10.2022	SB2022103116 SB2022103117 SB2022111404 and 122 more
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	1.0.19.0	25.10.2022	SB2022102509 SB2022102510 SB2022103117 and 208 more
#VU53202 - Command injection CVE-2021-23337	CWE-77	Medium	No	No	1.0.24.0	12.05.2021	SB2021021525 SB2021051230 SB2021062703 and 62 more

Showing elements 41 - 60 out of 55