Known vulnerabilities in IBM API Connect 10.0.8.2 ifix2 - page 5

Version: 10.0.8.2 ifix2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_api_connect:*:*:*:*:*:*:*:*
Total vulnerabilities: 160
Public exploits: 11
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM API Connect version 10.0.8.2 ifix2 IBM API Connect 10.0.8.2 ifix2 is affected by 160 vulnerabilities: 3 critical, 19 high, 40 medium, 98 low Critical High Medium Low

Vulnerabilities (160)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108745 - Integer overflow
CVE-2025-29087
CWE-190 Medium
No
No
10.0.8.2 ifix2 07.05.2025 SB2025050709
SB2025050710
SB2025050714
and 14 more
#VU108124 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-43859
CWE-444 Medium
No
No
10.0.8.2 ifix2 02.05.2025 SB2025050214
SB2025050215
SB2025050216
and 24 more
#VU107522 - Improper input validation
CVE-2025-30691
CWE-20 Medium
No
No
10.0.8.2 ifix2 16.04.2025 SB20250416146
SB20250416159
SB2025042933
and 33 more
#VU107481 - Improper Authorization
CVE-2025-30215
CWE-285 Medium
Public exploit available
No
10.0.8.2 ifix2 16.04.2025 SB2025041627
SB2025061142
SB2025071707
and 1 more
#VU107155 - Use After Free
CVE-2025-31498
CWE-416 High
No
No
10.0.8.2 ifix2 08.04.2025 SB2025040846
SB2025040925
SB2025040926
and 18 more
#VU106844 - Memory corruption
CVE-2025-21927
CWE-119 Low
No
No
10.0.8.2 ifix2 02.04.2025 SB20250402107
SB2025042540
SB2025042544
and 49 more
#VU105796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-27610
CWE-22 Medium
No
No
10.0.8.2 ifix2 17.03.2025 SB2025031756
SB20250317118
SB20250317119
and 15 more
#VU105795 - Improper Output Neutralization for Logs
CVE-2025-27111
CWE-117 Medium
No
No
10.0.8.2 ifix2 17.03.2025 SB2025031755
SB20250317119
SB2025031840
and 10 more
#VU105715 - Out-of-bounds write
CVE-2025-27363
CWE-787 Critical
Public exploit available
Exploited
10.0.8.2 ifix2 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU105387 - Improper input validation
CVE-2025-27516
CWE-20 Low
No
No
10.0.8.2 ifix2 06.03.2025 SB2025030628
SB2025031001
SB2025031002
and 83 more
#VU97781 - Use After Free
CVE-2024-46849
CWE-416 Low
No
No
10.0.8.2 ifix2 30.09.2024 SB2024093034
SB2024100401
SB2024101232
and 46 more
#VU97776 - Missing release of memory after effective lifetime
CVE-2024-46854
CWE-401 Low
No
No
10.0.8.2 ifix2 30.09.2024 SB2024093029
SB2024100401
SB2024100993
and 43 more
#VU96197 - Improper input validation
CVE-2024-43839
CWE-20 Low
No
No
10.0.8.2 ifix2 19.08.2024 SB20240819138
SB2024082364
SB2024082365
and 34 more
#VU95561 - Improper Locking
CVE-2024-42252
CWE-667 Low
No
No
10.0.8.2 ifix2 08.08.2024 SB2024080844
SB2024100877
SB2024100879
and 46 more
#VU95022 - Error Handling
CVE-2024-41022
CWE-388 Low
No
No
10.0.8.2 ifix2 31.07.2024 SB20240731105
SB2024080569
SB2024080968
and 35 more
#VU94842 - Improper input validation
CVE-2024-41015
CWE-20 Low
No
No
10.0.8.2 ifix2 29.07.2024 SB2024072938
SB2024080569
SB2024081301
and 42 more
#VU94277 - Improper Locking
CVE-2024-39501
CWE-667 Low
No
No
10.0.8.2 ifix2 13.07.2024 SB2024071377
SB2024071626
SB2024071701
and 52 more
#VU93820 - Out-of-bounds read
CVE-2024-39472
CWE-125 Low
No
No
10.0.8.2 ifix2 05.07.2024 SB2024070559
SB2024072667
SB2024072669
and 36 more
#VU93819 - Use After Free
CVE-2024-39479
CWE-416 Low
No
No
10.0.8.2 ifix2 05.07.2024 SB2024070558
SB2024072143
SB2024082051
and 11 more
#VU93344 - Memory corruption
CVE-2024-38544
CWE-119 Low
No
No
10.0.8.2 ifix2 25.06.2024 SB20240625148
SB2024070973
SB2024071103
and 37 more


Showing elements 81 - 100 out of 160