Known vulnerabilities in Engineering Workflow Management - page 2

Vendor: IBM Corporation

Software: Engineering Workflow Management

Software CPE: cpe:2.3:a:ibm_corporation:engineering_workflow_management:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 61

Public exploits: 5

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (61)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU75686 - Improper Validation of Certificate with Host Mismatch CVE-2022-39161	CWE-297	Low	No	No	-	03.05.2023	SB2023050303 SB2023050304 SB2023063008 and 7 more
#VU69675 - Improper Control of Generation of Code ('Code Injection') CVE-2022-24999	CWE-94	Medium	Available	No	7.0.1 iFix020, 7.0.2 iFix020	29.11.2022	SB2022112910 SB2022112911 SB2022112943 and 49 more
#VU69670 - Improper input validation CVE-2022-3509	CWE-20	Medium	No	No	-	29.11.2022	SB2022111433 SB2022112934 SB2023011787 and 58 more
#VU69293 - Improper input validation CVE-2022-3171	CWE-20	Medium	No	No	-	14.11.2022	SB2022111433 SB2022111440 SB2022112934 and 105 more
#VU64914 - Incorrect Regular Expression CVE-2021-21252	CWE-185	Medium	No	No	7.0.1 iFix020, 7.0.2 iFix020	04.07.2022	SB2021021909 SB2023032835 SB2025032829
#VU62768 - Uncontrolled Memory Allocation CVE-2022-1473	CWE-789	Low	No	No	7.0.1 iFix022, 7.0.2 iFix023	03.05.2022	SB2022050315 SB2022050436 SB2022050532 and 18 more
#VU62767 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2022-1434	CWE-300	Low	No	No	7.0.1 iFix022, 7.0.2 iFix023	03.05.2022	SB2022050315 SB2022050436 SB2022050532 and 10 more
#VU62766 - Security Features CVE-2022-1343	CWE-254	Medium	No	No	7.0.1 iFix022, 7.0.2 iFix023	03.05.2022	SB2022050315 SB2022050436 SB2022050532 and 14 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-1292	CWE-78	Medium	Available	No	7.0.1 iFix022, 7.0.2 iFix023	03.05.2022	SB2022050315 SB2022050436 SB2022050503 and 141 more
#VU62399 - Improper input validation CVE-2022-21426	CWE-20	Medium	No	No	7.1.5.17, 8.0.8.0	19.04.2022	SB2022041944 SB2022041945 SB2022042102 and 129 more
#VU60166 - Cryptographic Issues CVE-2021-4160	CWE-310	Low	No	No	7.0.1 iFix022, 7.0.2 iFix023	28.01.2022	SB2022012811 SB2022031611 SB2022042517 and 29 more
#VU56064 - Out-of-bounds read CVE-2021-3712	CWE-125	Medium	No	No	7.0.1 iFix022, 7.0.2 iFix023	24.08.2021	SB2021082414 SB2021082508 SB2021082510 and 142 more
#VU55059 - Improper input validation CVE-2021-2432	CWE-20	Low	No	No	-	20.07.2021	SB2021072054 SB2021083016 SB2021091525 and 31 more
#VU55057 - Improper input validation CVE-2021-2388	CWE-20	Medium	No	No	-	20.07.2021	SB2021072054 SB2021072055 SB2021072201 and 62 more
#VU55058 - Improper Verification of Cryptographic Signature CVE-2021-2369	CWE-347	Low	No	No	-	20.07.2021	SB2021072054 SB2021072055 SB2021072201 and 76 more
#VU50745 - Improper input validation CVE-2021-23840	CWE-20	Medium	No	No	7.0.1 iFix022, 7.0.2 iFix023	17.02.2021	SB2021021702 SB2021021817 SB2021022420 and 83 more
#VU50744 - Cryptographic Issues CVE-2021-23839	CWE-310	Low	No	No	7.0.1 iFix022, 7.0.2 iFix023	17.02.2021	SB2021021702 SB2021041501 SB2021041502 and 15 more
#VU50740 - NULL Pointer Dereference CVE-2021-23841	CWE-476	Medium	No	No	7.0.1 iFix022, 7.0.2 iFix023	17.02.2021	SB2021021702 SB2021021817 SB2021022420 and 66 more
#VU48896 - NULL Pointer Dereference CVE-2020-1971	CWE-476	Medium	Available	No	7.0.1 iFix022, 7.0.2 iFix023	08.12.2020	SB2020120852 SB2020120903 SB2020120905 and 91 more
#VU46573 - Exposure of sensitive information to an unauthorized actor CVE-2020-1968	CWE-200	Medium	No	No	7.0.1 iFix022, 7.0.2 iFix023	10.09.2020	SB2020091011 SB2020121720 SB2021012078 and 22 more

Showing elements 21 - 40 out of 61

Known vulnerabilities in Engineering Workflow Management - page 2

Breakdown by Severity Chart

Vulnerabilities (61)

Please verify you're human