Known vulnerabilities in DataPower Operator

Software CPE: cpe:2.3:a:ibm_corporation:datapower_operator:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DataPower Operator DataPower Operator is affected by 10 known vulnerabilities: 1 high, 8 medium, 1 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97216 - Resource exhaustion
CVE-2024-34156
CWE-400 Medium
No
No
1.6.17, 1.11.3, 1.12.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU97215 - Resource exhaustion
CVE-2024-34155
CWE-400 Medium
No
No
1.6.17, 1.11.3, 1.12.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU87196 - Error Handling
CVE-2024-24783
CWE-388 Medium
No
No
1.6.14, 1.10.1, 1.11.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU83928 - Resource exhaustion
CVE-2023-39326
CWE-400 Medium
No
No
1.6.13, 1.9.1 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU82064 - Resource exhaustion
CVE-2023-39325
CWE-400 Medium
No
No
1.8.1 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
1.8.1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409
CWE-295 Medium
No
No
1.6.9, 1.8.0 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU72685 - Resource Management Errors
CVE-2022-41724
CWE-399 Medium
No
No
1.6.6 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU62037 - Incorrect Authorization
CVE-2022-23773
CWE-863 Low
Available
No
1.2.7, 1.5.1 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 39 more
#VU59042 - Resource exhaustion
CVE-2021-44717
CWE-400 Medium
No
No
1.2.7, 1.5.1 16.12.2021 SB2021121610
SB2021121646
SB2022031628
and 32 more