Known vulnerabilities in Engineering Workflow Management - page 3

Vendor: IBM Corporation
Software: Engineering Workflow Management
Software CPE: cpe:2.3:a:ibm_corporation:engineering_workflow_management:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 61
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Engineering Workflow Management Engineering Workflow Management is affected by 61 known vulnerabilities: 1 high, 32 medium, 28 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61426 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24728		 CWE-79 Low
No
No
 7.0.1 iFix021, 7.0.2 iFix021 17.03.2022 SB2022031702
SB2022031703
SB2022031704
and 12 more
#VU59359 - Exposure of sensitive information to an unauthorized actor
CVE-2021-29701		 CWE-200 Low
No
No
 7.0 iFix013, 7.0.1 iFix014, 7.0.2 iFix012 11.01.2022 SB2022011107
#VU58906 - Error Handling
CVE-2021-4044		 CWE-388 Low
No
Exploited
 7.0 iFix015, 7.0.1 iFix017, 7.0.2 iFix013 14.12.2021 SB2021121446
SB2022062216
#VU55860 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32809		 CWE-79 Low
No
No
 7.0.1 iFix021, 7.0.2 iFix021 16.08.2021 SB2021081608
SB2022032314
SB2023011225
and 8 more
#VU55859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-37695		 CWE-79 Low
No
No
 7.0.1 iFix021, 7.0.2 iFix021 16.08.2021 SB2021081608
SB2022011822
SB2022020113
and 16 more
#VU54394 - Incorrect Regular Expression
CVE-2020-28500		 CWE-185 Medium
No
No
 7.0.1 iFix021, 7.0.2 iFix021 27.06.2021 SB2021062702
SB2021062703
SB2021090905
and 30 more
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 7.0.1 iFix021, 7.0.2 iFix021 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 59 more
#VU51849 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20506		 CWE-79 Low
No
No
 7.0 iFix008, 7.0.1 iFix006, 7.0.2 iFix001 01.04.2021 SB2021040126
#VU47770 - Improper input validation
CVE-2020-9281		 CWE-20 Medium
No
No
 7.0.1 iFix021, 7.0.2 iFix021 21.10.2020 SB2020102103
SB2020102951
SB2021012078
and 8 more
#VU41989 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8203		 CWE-94 Medium
No
No
 7.0.1 iFix021, 7.0.2 iFix021 10.08.2020 SB2020071548
SB2020122111
SB2021042308
and 31 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 7.0.1 iFix021, 7.0.2 iFix021 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 7.0.1 iFix021, 7.0.2 iFix021 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU21707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10735		 CWE-79 Low
No
No
 7.0.1 iFix021, 7.0.2 iFix021 10.10.2019 SB2019010911
SB2019101009
SB2020093090
and 21 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 7.0.1 iFix021, 7.0.2 iFix021 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8331		 CWE-79 Low
No
No
 7.0.1 iFix021, 7.0.2 iFix021 14.02.2019 SB2019021412
SB2019031501
SB2019101009
and 28 more
#VU16542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20677		 CWE-79 Low
No
No
 7.0.1 iFix021, 7.0.2 iFix021 14.12.2018 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU31182 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-17960		 CWE-79 Low
No
No
 7.0.1 iFix021, 7.0.2 iFix021 14.11.2018 SB2018111420
SB2021040136
SB2018042442
and 6 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251		 CWE-79 Low
No
No
 7.0.1 iFix021, 7.0.2 iFix021 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more
#VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14042		 CWE-79 Low
No
No
 7.0.1 iFix021, 7.0.2 iFix021 18.07.2018 SB2018071803
SB2020093090
SB2020110508
and 22 more
#VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14040		 CWE-79 Low
No
No
 7.0.1 iFix021, 7.0.2 iFix021 17.07.2018 SB2018071803
SB2019031501
SB2020093090
and 24 more


Showing elements 41 - 60 out of 61