Known vulnerabilities in Engineering Test Management

Vendor: IBM Corporation
Software: Engineering Test Management
Software CPE: cpe:2.3:a:ibm_corporation:engineering_test_management:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 66
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Engineering Test Management Engineering Test Management is affected by 66 known vulnerabilities: 4 high, 46 medium, 16 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12635		 CWE-79 Medium
No
No
 - 12.12.2025 SB2025121283
SB2025121517
SB2025121518
and 42 more
#VU114346 - Command injection
CVE-2025-7962		 CWE-77 Medium
No
No
 - 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 54 more
#VU114097 - Improper Certificate Validation
CVE-2025-33142		 CWE-295 Medium
No
No
 - 15.08.2025 SB2025081504
SB2025081894
SB2025081911
and 14 more
#VU113085 - Interpretation Conflict
CVE-2024-56339		 CWE-436 Medium
No
No
 - 21.07.2025 SB2025072116
SB2025072130
SB2025072305
and 45 more
#VU113074 - Stack-based buffer overflow
CVE-2025-36097		 CWE-121 High
No
No
 - 18.07.2025 SB20250718100
SB2025072128
SB2025072307
and 43 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 - 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU109860 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-33104		 CWE-79 Low
No
No
 - 27.05.2025 SB2025052752
SB2025052753
SB2025052908
and 6 more
#VU107856 - Server-Side Request Forgery (SSRF)
CVE-2025-27907		 CWE-918 Medium
No
No
 - 23.04.2025 SB2025042309
SB2025042318
SB2025042345
and 11 more
#VU100521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45087		 CWE-79 Medium
No
No
 - 15.11.2024 SB2024111525
SB2024112217
SB2024112515
and 6 more
#VU99760 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45086		 CWE-611 Medium
No
No
 - 05.11.2024 SB2024110544
SB2024110623
SB2024110629
and 8 more
#VU98810 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45072		 CWE-611 Medium
No
No
 - 18.10.2024 SB2024101807
SB2024101813
SB20241022399
and 11 more
#VU98730 - Improper input validation
CVE-2024-45085		 CWE-20 Medium
No
No
 - 16.10.2024 SB2024101654
SB2024101816
SB2024101820
and 8 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 7.0.3.0.18, 7.1.0.0.5 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU95625 - Improper input validation
CVE-2024-35154		 CWE-20 Low
No
No
 - 09.08.2024 SB2024080941
SB2024081324
SB2024081439
and 11 more
#VU94637 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-37532		 CWE-451 Medium
No
No
 - 22.07.2024 SB2024072221
SB2024072222
SB2024072306
and 14 more
#VU93396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-35153		 CWE-79 Medium
No
No
 - 26.06.2024 SB2024062690
SB2024062708
SB2024062717
and 12 more
#VU91984 - Permissions, Privileges, and Access Controls
CVE-2024-3933		 CWE-264 Low
No
No
 - 12.06.2024 SB2024061213
SB20240613101
SB20240613102
and 29 more
#VU86800 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-4218		 CWE-611 Low
No
No
 7.1.0.0.6 26.02.2024 SB2024022642
SB2024030105
SB2024032906
and 11 more
#VU51606 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-27807		 CWE-835 Medium
No
No
 7.0.3.0.20, 7.1.0.0.6 22.03.2021 SB2021032216
SB2021072779
SB2022090818
and 7 more
#VU51511 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13936		 CWE-94 High
No
No
 7.0.3.0.22, 7.1.0.8 16.03.2021 SB2021031618
SB2021072614
SB2022011911
and 45 more


Showing elements 1 - 20 out of 66