Known vulnerabilities in IBM AIX - page 3

Software: IBM AIX
Software CPE: cpe:2.3:o:ibm_corporation:ibm_aix:*:*:*:*:*:*:*:*
Total vulnerabilities: 485
Public exploits: 27
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM AIX IBM AIX is affected by 485 known vulnerabilities: 48 high, 132 medium, 305 low Critical High Medium Low

Vulnerabilities (485)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91113 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-25021
CWE-94 Low
No
No
7.3.1, 7.3.1.2 05.06.2024 SB2024060504
#VU89225 - Permissions, Privileges, and Access Controls
CVE-2024-27273
CWE-264 Low
No
No
7.2.5 SP08, 7.3.1 SP04, 7.3.2 SP02 07.05.2024 SB2024050737
#VU88575 - Improper input validation
CVE-2023-47100
CWE-20 High
No
No
7.3.1, 7.3.1.2 16.04.2024 SB2024041718
SB2024041724
SB2024060504
and 8 more
#VU87185 - UNIX Symbolic Link (Symlink) Following
CVE-2023-6597
CWE-61 Low
No
No
- 07.03.2024 SB2024030718
SB2024030726
SB2024030727
and 88 more
#VU86382 - Reachable Assertion
CVE-2023-5517
CWE-617 Medium
No
No
- 13.02.2024 SB2024021329
SB2024021330
SB2024021347
and 43 more
#VU86381 - Reachable Assertion
CVE-2023-5679
CWE-617 Medium
No
No
- 13.02.2024 SB2024021329
SB2024021330
SB2024021347
and 36 more
#VU86231 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2023-52426
CWE-776 Medium
No
No
- 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 23 more
#VU86230 - Resource exhaustion
CVE-2023-52425
CWE-400 Medium
No
No
- 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 120 more
#VU86052 - Use After Free
CVE-2024-25062
CWE-416 High
No
No
7.2.5 SP08, 7.3.1 SP04, 7.3.2 SP02 05.02.2024 SB2024020507
SB2024020508
SB2024020742
and 115 more
#VU85468 - Improper input validation
CVE-2024-20918
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85469 - Improper input validation
CVE-2024-20952
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85471 - Improper input validation
CVE-2024-20921
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85472 - Improper input validation
CVE-2024-20926
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945
CWE-20 Low
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU84985 - Out-of-bounds read
CVE-2023-7104
CWE-125 Medium
No
No
- 04.01.2024 SB2024010417
SB2024010420
SB2024010516
and 108 more
#VU84797 - Command injection
CVE-2023-51765
CWE-77 Medium
No
No
7.2.5 SP08, 7.3.0, 7.3.1 SP04, 7.3.2 SP02 27.12.2023 SB2023122716
SB2024013167
SB2024030417
and 4 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385
CWE-78 Medium
Available
No
- 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Available
No
- 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83508 - Off-by-one Error
CVE-2023-47038
CWE-193 High
No
No
7.3.1, 7.3.1.2 27.11.2023 SB2023112761
SB2023112763
SB2023112959
and 33 more
#VU82583 - Observable discrepancy
CVE-2023-33850
CWE-203 Medium
No
No
- 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more


Showing elements 41 - 60 out of 485