Known vulnerabilities in Event Processing

Vendor: IBM Corporation
Software: Event Processing
Software CPE: cpe:2.3:a:ibm_corporation:event_processing:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 37
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Event Processing Event Processing is affected by 37 known vulnerabilities: 8 high, 18 medium, 11 low Critical High Medium Low

Vulnerabilities (37)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128392 - File And Directory Information Exposure
CVE-2025-68429		 CWE-538 Medium
No
No
 1.4.7 28.04.2026 SB20260428212
SB2026051371
#VU119966 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-67735		 CWE-93 Medium
No
No
 1.5.2 15.12.2025 SB2025121552
SB2025121974
SB2026012079
and 23 more
#VU119401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-64756		 CWE-78 Medium
No
No
 1.4.7 09.12.2025 SB2025120922
SB2025120932
SB20251210178
and 18 more
#VU117611 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-11966		 CWE-79 Low
No
No
 1.4.7 23.10.2025 SB2025102374
SB2025121725
SB2026010706
and 3 more
#VU117583 - Files or Directories Accessible to External Parties
CVE-2025-11965		 CWE-552 Medium
No
No
 1.4.7 23.10.2025 SB2025102374
SB2025121725
SB2026012038
and 2 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 1.4.5 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU113811 - Exposure of resource to wrong sphere
CVE-2025-49574		 CWE-668 Low
No
No
 1.4.5 12.08.2025 SB2025081226
SB2025100107
SB2025100114
and 9 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 1.4.5 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU112166 - Improper Authentication
CVE-2025-49146		 CWE-287 High
No
No
 1.4.2 04.07.2025 SB2025070405
SB2025070406
SB2025070708
and 13 more
#VU109922 - Missing Origin Validation in WebSockets
CVE-2025-48068		 CWE-1385 Low
No
No
 1.4.5 29.05.2025 SB2025052970
SB2025122227
SB2026010925
and 4 more
#VU106922 - Exposure of sensitive information to an unauthorized actor
CVE-2025-30218		 CWE-200 Low
No
No
 1.4.5 03.04.2025 SB2025040314
SB2026010925
#VU105984 - Inefficient Regular Expression Complexity
CVE-2025-27789		 CWE-1333 Low
No
No
 1.4.1 24.03.2025 SB2025032476
SB2025041020
SB2025041691
and 45 more
#VU105939 - Improper Authorization
CVE-2025-29927		 CWE-285 High
Available
Exploited
 1.4.0 21.03.2025 SB2025032132
SB2025052304
SB2025061612
and 5 more
#VU105452 - Server-Side Request Forgery (SSRF)
CVE-2025-27152		 CWE-918 Medium
Available
No
 1.4.0 07.03.2025 SB2025030777
SB2025031918
SB2025032417
and 42 more
#VU103769 - Resource exhaustion
CVE-2025-25193		 CWE-400 Low
No
No
 1.4.1 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 56 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538		 CWE-185 Medium
No
No
 1.3.0 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 1.4.1 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU97745 - Improper input validation
CVE-2024-47175		 CWE-20 High
Available
No
 1.2.2 27.09.2024 SB2024092719
SB2024092722
SB2024092723
and 50 more
#VU97744 - Command injection
CVE-2024-47177		 CWE-77 High
Available
No
 1.2.2 27.09.2024 SB2024092717
SB2024092725
SB2024092726
and 11 more
#VU97742 - Improper input validation
CVE-2024-47076		 CWE-20 High
Available
No
 1.2.2 27.09.2024 SB2024092712
SB2024092714
SB2024092715
and 27 more


Showing elements 1 - 20 out of 37