Known vulnerabilities in Event Streams

Software: Event Streams
Software CPE: cpe:2.3:a:ibm_corporation:event_streams:*:*:*:*:*:*:*:*
Total vulnerabilities: 204
Public exploits: 19
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Event Streams Event Streams is affected by 204 known vulnerabilities: 1 critical, 20 high, 141 medium, 42 low Critical High Medium Low

Vulnerabilities (204)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123997 - Improper input validation
CVE-2026-2391
CWE-20 Medium
No
No
13.0.0 13.03.2026 SB2026031335
SB2026031336
SB2026032417
and 13 more
#VU123140 - Inefficient Regular Expression Complexity
CVE-2026-26996
CWE-1333 Medium
No
No
13.0.0 23.02.2026 SB2026022345
SB2026030633
SB2026032328
and 33 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465
CWE-1321 Medium
No
No
13.0.0 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 69 more
#VU121666 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-64718
CWE-1321 Medium
No
No
12.2.2 19.01.2026 SB2026011995
SB2026011999
SB20260119100
and 26 more
#VU121638 - Improper Verification of Cryptographic Signature
CVE-2025-65945
CWE-347 Medium
No
No
12.2.2 19.01.2026 SB2026011925
SB2026011926
SB2026012034
and 14 more
#VU121159 - Resource exhaustion
CVE-2025-15284
CWE-400 Medium
No
No
12.2.2 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 38 more
#VU119966 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-67735
CWE-93 Medium
No
No
13.0.0 15.12.2025 SB2025121552
SB2025121974
SB2026012079
and 23 more
#VU118198 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-54798
CWE-59 Low
No
No
12.2.2 07.11.2025 SB2025110743
SB2025110755
SB2025112543
and 9 more
#VU117483 - Improper input validation
CVE-2025-53066
CWE-20 Medium
No
No
13.0.0 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057
CWE-20 Medium
No
No
13.0.0 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU114392 - Improper Handling of Unexpected Data Type
CVE-2025-7339
CWE-241 Low
No
No
12.2.2 22.08.2025 SB2025082222
SB2025091525
SB2025091621
and 18 more
#VU113811 - Exposure of resource to wrong sphere
CVE-2025-49574
CWE-668 Low
No
No
12.2.1 12.08.2025 SB2025081226
SB2025100107
SB2025100114
and 9 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889
CWE-1333 Low
No
No
12.2.2 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 33 more
#VU111165 - Improper Access Control
CVE-2025-48734
CWE-284 Medium
No
No
12.2.1 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU108836 - Resource exhaustion
CVE-2025-1948
CWE-400 Medium
No
No
12.2.1 09.05.2025 SB2025050924
SB2025051562
SB2025063009
and 18 more
#VU106936 - Resource exhaustion
CVE-2025-1634
CWE-400 Medium
No
No
12.2.1 03.04.2025 SB2025040340
SB2025070345
SB2025070708
and 4 more
#VU106927 - Resource exhaustion
CVE-2025-2240
CWE-400 Medium
No
No
12.2.1 03.04.2025 SB2025040318
SB2025040326
SB2025040327
and 6 more
#VU106253 - Improper input validation
CVE-2025-22870
CWE-20 Medium
Available
No
12.2.1 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU105459 - Resource exhaustion
CVE-2025-22869
CWE-400 Low
No
No
12.2.1 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU101868 - Resource exhaustion
CVE-2024-45338
CWE-400 Medium
No
No
12.2.1 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more


Showing elements 1 - 20 out of 204