Known vulnerabilities in DevOps - page 2

Vendor: IBM Corporation
Software: DevOps
Software CPE: cpe:2.3:a:ibm_corporation:devops:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 43
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DevOps DevOps is affected by 43 known vulnerabilities: 1 critical, 6 high, 26 medium, 10 low Critical High Medium Low

Vulnerabilities (43)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100588 - Improper Authentication
CVE-2024-52316		 CWE-287 Low
No
No
 7.0.0.4 18.11.2024 SB2024111823
SB2024112550
SB2024112832
and 36 more
#VU100587 - Resource Management Errors
CVE-2024-52317		 CWE-399 Medium
Available
No
 7.0.0.4 18.11.2024 SB2024111823
SB2024112550
SB2024121231
and 27 more
#VU94749 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2014-3643		 CWE-611 Medium
No
No
 7.0.0.2 26.07.2024 SB2019121506
SB2024072613
#VU93732 - Resource Management Errors
CVE-2024-34750		 CWE-399 Medium
No
No
 7.0.0.3 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU89343 - Resource exhaustion
CVE-2023-38264		 CWE-400 Medium
No
No
 7.0.0.2 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354		 CWE-611 High
No
No
 - 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU88665 - Improper input validation
CVE-2024-21085		 CWE-20 Low
No
No
 7.0.0.2 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88666 - Improper input validation
CVE-2024-21011		 CWE-20 Low
No
No
 7.0.0.2 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88668 - Improper input validation
CVE-2024-21094		 CWE-20 Low
No
No
 7.0.0.2 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 - 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259		 CWE-918 Medium
No
No
 7.0.0.2 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU86808 - Resource exhaustion
CVE-2024-22201		 CWE-400 Medium
No
No
 - 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU85619 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21733		 CWE-200 Medium
Available
No
 7.0.0.1 19.01.2024 SB2024011929
SB2024020819
SB2024030424
and 9 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493		 CWE-502 High
No
No
 7.0.0.2 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302		 CWE-502 High
No
No
 7.0.0.2 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 7.0.0.2 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 7.0.0.2 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU27960 - Deserialization of Untrusted Data
CVE-2019-17571		 CWE-502 High
No
No
 7.0.0.2 18.05.2020 SB2019122027
SB2020051806
SB2020011497
and 28 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488		 CWE-295 Low
No
No
 7.0.0.2 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more
#VU370 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2016-2183		 CWE-327 Low
Available
No
 7.0.0.2 08.09.2016 SB2016082601
SB2017053118
SB2017011701
and 49 more


Showing elements 21 - 40 out of 43