Known vulnerabilities in Engineering Lifecycle Management - page 2
Vendor:
IBM Corporation
Software:
Engineering Lifecycle Management
Software CPE:
cpe:2.3:a:ibm_corporation:engineering_lifecycle_management:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
60
Public exploits:
4
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (60)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU93460 - Use After Free CVE-2023-42363 |
CWE-416 | Low | 1.3.0 | 27.06.2024 |
SB2024062758 SB2024062811 SB2024072672 and 11 more |
||
| #VU93457 - Heap-based Buffer Overflow CVE-2023-42366 |
CWE-122 | Low | 1.3.0 | 27.06.2024 |
SB2024062758 SB2024062811 SB2024090359 and 7 more |
||
| #VU84506 - Exposure of sensitive information to an unauthorized actor CVE-2022-34355 |
CWE-200 | Low | 6.0.6 iFix028, 6.0.6.1 iFix027, 7.0 iFix017, 7.0.1 iFix018, 7.0.2 iFix016 | 18.12.2023 |
SB2023121823 |
||
| #VU80391 - Out-of-bounds write CVE-2022-48174 |
CWE-787 | Medium | 1.3.0 | 04.09.2023 |
SB2023090428 SB2023090430 SB2023090537 and 16 more |
||
| #VU78901 - Deserialization of Untrusted Data CVE-2022-40609 |
CWE-502 | High | - | 03.08.2023 |
SB2023080307 SB2023080808 SB2023080809 and 56 more |
||
| #VU78413 - Improper input validation CVE-2023-22045 |
CWE-20 | Low | - | 19.07.2023 |
SB2023071985 SB2023071986 SB2023071987 and 155 more |
||
| #VU78414 - Improper input validation CVE-2023-22049 |
CWE-20 | Low | - | 19.07.2023 |
SB2023071985 SB2023071986 SB2023071987 and 164 more |
||
| #VU65845 - Authentication Bypass by Spoofing CVE-2022-22476 |
CWE-290 | Medium | - | 28.07.2022 |
SB2022072816 SB2022080903 SB2022082228 and 29 more |
||
| #VU62768 - Uncontrolled Memory Allocation CVE-2022-1473 |
CWE-789 | Low | 7.0.1 iFix022, 7.0.2 iFix023 | 03.05.2022 |
SB2022050315 SB2022050436 SB2022050532 and 18 more |
||
| #VU62767 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2022-1434 |
CWE-300 | Low | 7.0.1 iFix022, 7.0.2 iFix023 | 03.05.2022 |
SB2022050315 SB2022050436 SB2022050532 and 10 more |
||
| #VU62766 - Security Features CVE-2022-1343 |
CWE-254 | Medium | 7.0.1 iFix022, 7.0.2 iFix023 | 03.05.2022 |
SB2022050315 SB2022050436 SB2022050532 and 14 more |
||
| #VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-1292 |
CWE-78 | Medium | 7.0.1 iFix022, 7.0.2 iFix023 | 03.05.2022 |
SB2022050315 SB2022050436 SB2022050503 and 141 more |
||
| #VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0778 |
CWE-835 | Medium | 7.0.1 iFix022, 7.0.2 iFix023 | 15.03.2022 |
SB2022031520 SB2022031522 SB2022031611 and 238 more |
||
| #VU60166 - Cryptographic Issues CVE-2021-4160 |
CWE-310 | Low | 7.0.1 iFix022, 7.0.2 iFix023 | 28.01.2022 |
SB2022012811 SB2022031611 SB2022042517 and 29 more |
||
| #VU56064 - Out-of-bounds read CVE-2021-3712 |
CWE-125 | Medium | 7.0.1 iFix022, 7.0.2 iFix023 | 24.08.2021 |
SB2021082414 SB2021082508 SB2021082510 and 142 more |
||
| #VU50745 - Improper input validation CVE-2021-23840 |
CWE-20 | Medium | 7.0.1 iFix022, 7.0.2 iFix023 | 17.02.2021 |
SB2021021702 SB2021021817 SB2021022420 and 83 more |
||
| #VU50744 - Cryptographic Issues CVE-2021-23839 |
CWE-310 | Low | 7.0.1 iFix022, 7.0.2 iFix023 | 17.02.2021 |
SB2021021702 SB2021041501 SB2021041502 and 15 more |
||
| #VU50740 - NULL Pointer Dereference CVE-2021-23841 |
CWE-476 | Medium | 7.0.1 iFix022, 7.0.2 iFix023 | 17.02.2021 |
SB2021021702 SB2021021817 SB2021022420 and 66 more |
||
| #VU48896 - NULL Pointer Dereference CVE-2020-1971 |
CWE-476 | Medium | 7.0.1 iFix022, 7.0.2 iFix023 | 08.12.2020 |
SB2020120852 SB2020120903 SB2020120905 and 91 more |
||
| #VU46573 - Exposure of sensitive information to an unauthorized actor CVE-2020-1968 |
CWE-200 | Medium | 7.0.1 iFix022, 7.0.2 iFix023 | 10.09.2020 |
SB2020091011 SB2020121720 SB2021012078 and 22 more |
Showing elements 21 - 40 out of 60