Known vulnerabilities in DevOps Solution Workbench

Software CPE: cpe:2.3:a:ibm_corporation:devops_solution_workbench:*:*:*:*:*:*:*:*
Total vulnerabilities: 21
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DevOps Solution Workbench DevOps Solution Workbench is affected by 21 known vulnerabilities: 1 critical, 2 high, 15 medium, 3 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111210 - Improper input validation
CVE-2025-41234
CWE-20 Medium
No
No
- 17.06.2025 SB2025061720
SB2025070709
SB2025071012
and 13 more
#VU111162 - Resource exhaustion
CVE-2025-48976
CWE-400 Medium
Available
No
- 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU111161 - Resource exhaustion
CVE-2025-48988
CWE-400 Medium
Available
No
- 16.06.2025 SB2025061634
SB2025061927
SB20250620145
and 40 more
#VU111159 - Improper Protection of Alternate Path
CVE-2025-49125
CWE-424 Medium
No
No
- 16.06.2025 SB2025061634
SB2025061927
SB20250620145
and 35 more
#VU109959 - Improper Handling of Case Sensitivity
CVE-2025-46701
CWE-178 Low
Available
No
- 30.05.2025 SB2025053002
SB2025061335
SB2025062313
and 22 more
#VU107996 - Error Handling
CVE-2025-31650
CWE-388 Medium
Available
No
- 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 38 more
#VU107966 - Missing Authorization
CVE-2025-22235
CWE-862 Medium
No
No
- 25.04.2025 SB2025042526
SB2025060429
SB2025060529
and 15 more
#VU105881 - Security Features
CVE-2025-22228
CWE-254 Low
No
No
- 19.03.2025 SB2025031966
SB2025040327
SB2025061733
and 23 more
#VU105485 - Improper input validation
CVE-2025-24813
CWE-20 Critical
Available
Exploited
- 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU105459 - Resource exhaustion
CVE-2025-22869
CWE-400 Low
No
No
- 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 107 more
#VU101893 - Permissions, Privileges, and Access Controls
CVE-2024-56337
CWE-264 High
No
No
- 20.12.2024 SB2024122063
SB2025011311
SB2025011801
and 45 more
#VU101814 - Permissions, Privileges, and Access Controls
CVE-2024-50379
CWE-264 Medium
Available
No
- 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 57 more
#VU101777 - Improper Authorization
CVE-2024-45337
CWE-285 Medium
Available
No
- 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU100680 - Improper input validation
CVE-2024-38828
CWE-20 Medium
No
No
- 20.11.2024 SB2024112009
SB2025021262
SB2025040424
and 15 more
#VU100676 - Improper Authorization
CVE-2024-38827
CWE-285 Medium
No
No
- 19.11.2024 SB2024111987
SB2025012185
SB2025012188
and 30 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819
CWE-22 Medium
Available
No
- 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU98795 - Security Features
CVE-2024-38820
CWE-254 Medium
No
No
5.1 17.10.2024 SB2024101781
SB2024112618
SB2024120428
and 40 more
#VU97224 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38816
CWE-22 Medium
Available
No
- 12.09.2024 SB2024091290
SB20241014121
SB20241015124
and 24 more
#VU76601 - Deserialization of Untrusted Data
CVE-2016-1000027
CWE-502 High
No
No
- 29.05.2023 SB2023052915
SB2023060816
SB2023062703
and 24 more
#VU62314 - Security Features
CVE-2022-22968
CWE-254 Medium
Available
No
5.1 14.04.2022 SB2022041405
SB2022042903
SB2022060324
and 31 more


Showing elements 1 - 20 out of 21