Known vulnerabilities in IBM API Connect 10.0.8.2 ifix2 - page 7

Version: 10.0.8.2 ifix2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_api_connect:*:*:*:*:*:*:*:*
Total vulnerabilities: 160
Public exploits: 11
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM API Connect version 10.0.8.2 ifix2 IBM API Connect 10.0.8.2 ifix2 is affected by 160 vulnerabilities: 3 critical, 19 high, 40 medium, 98 low Critical High Medium Low

Vulnerabilities (160)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111068 - Incorrect Authorization
CVE-2023-47090
CWE-863 Medium
No
No
10.0.8.2 ifix2 11.06.2025 SB2023103077
SB2025061142
#VU104932 - Improper input validation
CVE-2022-49180
CWE-20 Low
No
No
10.0.8.2 ifix2 27.02.2025 SB2025022729
SB2025032664
SB2025040916
and 3 more
#VU104262 - Missing release of memory after effective lifetime
CVE-2022-49376
CWE-401 Low
No
No
10.0.8.2 ifix2 26.02.2025 SB2025022677
SB2025032664
SB2025040916
and 5 more
#VU93206 - Resource Management Errors
CVE-2024-26707
CWE-399 Low
No
No
10.0.8.2 ifix2 24.06.2024 SB20240624123
SB2024070852
SB2024070853
and 18 more
#VU92973 - Resource Management Errors
CVE-2023-52608
CWE-399 Low
No
No
10.0.8.2 ifix2 20.06.2024 SB20240620253
SB2024062806
SB2024062807
and 22 more
#VU92172 - Security Features
CVE-2023-52597
CWE-254 Low
No
No
10.0.8.2 ifix2 17.06.2024 SB2024061708
SB2024061808
SB20240620274
and 39 more
#VU91597 - Use After Free
CVE-2024-36971
CWE-416 Critical
No
Exploited
10.0.8.2 ifix2 10.06.2024 SB2024061024
SB2024070205
SB2024070474
and 100 more
#VU91541 - Improper Locking
CVE-2023-52587
CWE-667 Low
No
No
10.0.8.2 ifix2 08.06.2024 SB20240608240
SB2024070863
SB2024070866
and 32 more
#VU91504 - Improper Locking
CVE-2023-52774
CWE-667 Low
No
No
10.0.8.2 ifix2 08.06.2024 SB20240608203
SB2024062809
SB20240702143
and 14 more
#VU91484 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-52609
CWE-362 Low
No
No
10.0.8.2 ifix2 08.06.2024 SB20240608196
SB2024061380
SB2024061381
and 17 more
#VU90905 - Reachable Assertion
CVE-2023-52759
CWE-617 Low
No
No
10.0.8.2 ifix2 03.06.2024 SB20240603175
SB2024062808
SB2024062809
and 15 more
#VU90841 - NULL Pointer Dereference
CVE-2023-52607
CWE-476 Low
No
No
10.0.8.2 ifix2 03.06.2024 SB20240603117
SB2024062123
SB2024062124
and 46 more
#VU90819 - Out-of-bounds read
CVE-2024-36960
CWE-125 Low
No
No
10.0.8.2 ifix2 03.06.2024 SB20240603111
SB2024062810
SB2024070474
and 44 more
#VU89997 - Missing release of memory after effective lifetime
CVE-2022-48650
CWE-401 Low
No
No
10.0.8.2 ifix2 30.05.2024 SB20240530102
SB20240702138
SB20240702139
and 17 more
#VU89988 - Missing release of memory after effective lifetime
CVE-2023-52670
CWE-401 Low
No
No
10.0.8.2 ifix2 30.05.2024 SB2024053093
SB2024070205
SB2024070474
and 12 more
#VU88104 - Use After Free
CVE-2023-52600
CWE-416 Low
No
No
10.0.8.2 ifix2 03.04.2024 SB2024040371
SB2024040375
SB2024040376
and 27 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Public exploit available
No
10.0.8.2 ifix2 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU82552 - Use of Hard-coded Cryptographic Key
CVE-2023-46129
CWE-321 Medium
No
No
10.0.8.2 ifix2 30.10.2023 SB2023103010
SB2023112001
SB2023112002
and 5 more
#VU80506 - Use After Free
CVE-2023-4752
CWE-416 Low
No
No
10.0.8.2 ifix2 06.09.2023 SB2023090645
SB2023090649
SB2023090650
and 32 more
#VU19178 - Out-of-bounds write
CVE-2019-12900
CWE-787 High
No
No
10.0.8.2 ifix2 15.07.2019 SB2019071503
SB2019072101
SB2019080907
and 85 more


Showing elements 121 - 140 out of 160