Known vulnerabilities in IBM API Connect 10.0.8.2 ifix2 - page 2

Version: 10.0.8.2 ifix2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_api_connect:*:*:*:*:*:*:*:*
Total vulnerabilities: 160
Public exploits: 11
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM API Connect version 10.0.8.2 ifix2 IBM API Connect 10.0.8.2 ifix2 is affected by 160 vulnerabilities: 3 critical, 19 high, 40 medium, 98 low Critical High Medium Low

Vulnerabilities (160)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118198 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-54798
CWE-59 Low
No
No
10.0.8.5 07.11.2025 SB2025110743
SB2025110755
SB2025112543
and 9 more
#VU118195 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-7969
CWE-79 Medium
No
No
10.0.8.5 07.11.2025 SB2025110741
SB2025110755
SB2025112543
and 4 more
#VU117332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-59343
CWE-22 High
No
No
10.0.8.5 17.10.2025 SB2025101702
SB2025101703
SB2025101704
and 22 more
#VU115828 - Resource exhaustion
CVE-2025-6493
CWE-400 Medium
No
No
10.0.8.5 18.09.2025 SB20250918111
SB20250918112
SB2025112530
and 9 more
#VU115228 - Server-Side Request Forgery (SSRF)
CVE-2025-54370
CWE-918 Medium
No
No
10.0.8.5 16.09.2025 SB2025091634
SB2025111350
SB2025112543
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754
CWE-770 Medium
Public exploit available
No
10.0.8.5 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU114450 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-57810
CWE-835 Medium
No
No
10.0.8.5 27.08.2025 SB2025082720
SB2025100912
SB2025112543
and 4 more
#VU114392 - Improper Handling of Unexpected Data Type
CVE-2025-7339
CWE-241 Low
No
No
10.0.8.5 22.08.2025 SB2025082222
SB2025091525
SB2025091621
and 18 more
#VU114088 - Stack-based buffer overflow
CVE-2025-5222
CWE-121 High
No
No
10.0.8.5 14.08.2025 SB2025081454
SB2025081455
SB2025081456
and 34 more
#VU113533 - Use After Free
CVE-2025-7425
CWE-416 High
No
No
10.0.8.5 31.07.2025 SB2025073137
SB2025073144
SB2025073053
and 56 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783
CWE-330 Medium
Public exploit available
No
10.0.8.5 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more
#VU111969 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12718
CWE-22 Medium
No
No
10.0.8.5 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 62 more
#VU111389 - Improper Access Control
CVE-2025-6020
CWE-284 Low
No
No
10.0.8.5 19.06.2025 SB2025061987
SB2025061992
SB20250619103
and 69 more
#VU111143 - Double Free
CVE-2025-5914
CWE-415 High
No
No
10.0.8.5 16.06.2025 SB2025061602
SB2025061603
SB2025061604
and 51 more
#VU104099 - Use After Free
CVE-2024-56171
CWE-416 High
No
No
10.0.8.5 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104044 - Resource exhaustion
CVE-2024-12243
CWE-400 Medium
No
No
10.0.8.5 18.02.2025 SB2025021831
SB2025021832
SB2025021835
and 65 more
#VU103980 - Resource exhaustion
CVE-2024-12133
CWE-400 Medium
No
No
10.0.8.5 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU100912 - Improper Authentication
CVE-2024-10963
CWE-287 Medium
No
No
10.0.8.5 25.11.2024 SB2024112540
SB2024112541
SB2024112542
and 56 more
#VU100566 - Off-by-one Error
CVE-2024-52533
CWE-193 High
No
No
10.0.8.5 15.11.2024 SB20241115147
SB20241115148
SB20241115149
and 71 more
#VU81168 - Out-of-bounds read
CVE-2023-40403
CWE-125 Low
No
No
10.0.8.5 26.09.2023 SB2023092664
SB2023092707
SB2023092143
and 22 more


Showing elements 21 - 40 out of 160