Known vulnerabilities in IBM AIX 7.2.5 - page 3

Software: IBM AIX
Version: 7.2.5
Software CPE: cpe:2.3:o:ibm_corporation:ibm_aix:*:*:*:*:*:*:*:*
Total vulnerabilities: 126
Public exploits: 9
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM AIX version 7.2.5 IBM AIX 7.2.5 is affected by 126 vulnerabilities: 8 high, 60 medium, 58 low Critical High Medium Low

Vulnerabilities (126)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70386 - Improper input validation
CVE-2022-43382
CWE-20 Low
No
No
- 15.12.2022 SB2022121541
#VU70341 - Improper input validation
CVE-2022-41290
CWE-20 Low
No
No
- 14.12.2022 SB2022121442
#VU67760 - Type conversion
CVE-2020-10735
CWE-704 Medium
No
No
- 29.09.2022 SB2022092968
SB2022092970
SB2022093032
and 86 more
#VU67549 - Missing release of memory after effective lifetime
CVE-2022-38177
CWE-401 Medium
No
No
- 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 52 more
#VU67548 - Improper input validation
CVE-2022-3080
CWE-20 Medium
No
No
- 21.09.2022 SB2022092131
SB2022092140
SB2022092147
and 18 more
#VU67545 - Resource Management Errors
CVE-2022-2795
CWE-399 Medium
No
No
- 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 71 more
#VU67532 - Use After Free
CVE-2022-40674
CWE-416 High
No
No
- 21.09.2022 SB2022092118
SB2022092119
SB2022092317
and 111 more
#VU67204 - Improper input validation
CVE-2022-36768
CWE-20 Low
No
No
- 12.09.2022 SB2022091237
#VU67203 - Permissions, Privileges, and Access Controls
CVE-2022-34356
CWE-264 Low
No
No
- 12.09.2022 SB2022091237
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097
CWE-311 Low
No
No
- 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068
CWE-78 Medium
No
No
- 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292
CWE-78 Medium
Public exploit available
No
- 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU62741 - Integer overflow
CVE-2022-29824
CWE-190 High
No
No
- 03.05.2022 SB2022050305
SB2022050306
SB2022050307
and 73 more
#VU61671 - Memory corruption
CVE-2018-25032
CWE-119 Medium
No
No
- 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-25220
CWE-350 Medium
No
No
- 17.03.2022 SB2022031701
SB2022031719
SB2022031725
and 57 more
#VU59722 - Improper input validation
CVE-2022-21360
CWE-20 Medium
No
No
- 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 93 more
#VU59723 - Improper input validation
CVE-2022-21365
CWE-20 Medium
No
No
- 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 94 more
#VU54479 - Improper Verification of Cryptographic Signature
CVE-2021-3421
CWE-347 Medium
No
No
- 30.06.2021 SB2021063036
SB2021071302
SB2021072003
and 15 more
#VU54478 - Out-of-bounds read
CVE-2021-20266
CWE-125 Low
No
No
- 30.06.2021 SB2021063035
SB2021072003
SB2021111133
and 16 more
#VU54477 - Insufficient Verification of Data Authenticity
CVE-2021-20271
CWE-345 Medium
No
No
- 30.06.2021 SB2021063035
SB2021063038
SB2021071302
and 34 more


Showing elements 41 - 60 out of 126