Known vulnerabilities in IBM API Connect - page 10

Software CPE: cpe:2.3:a:ibm_corporation:ibm_api_connect:*:*:*:*:*:*:*:*
Total vulnerabilities: 236
Public exploits: 24
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM API Connect IBM API Connect is affected by 236 known vulnerabilities: 3 critical, 28 high, 73 medium, 132 low Critical High Medium Low

Vulnerabilities (236)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102099 - Improper input validation
CVE-2024-7646
CWE-20 High
No
No
10.0.9.0 30.12.2024 SB20241230123
SB20241230139
SB2025032042
and 1 more
#VU97687 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6484
CWE-79 Medium
No
No
10.0.9.0 25.09.2024 SB2024092512
SB20241230139
SB2025060920
and 3 more
#VU97606 - Improper Verification of Cryptographic Signature
CVE-2024-42459
CWE-347 Medium
No
No
10.0.9.0 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 23 more
#VU97605 - Improper Verification of Cryptographic Signature
CVE-2024-42460
CWE-347 Medium
No
No
10.0.9.0 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 24 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590
CWE-405 Medium
Available
No
10.0.9.0 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU96732 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45048
CWE-611 Medium
No
No
10.0.9.0 03.09.2024 SB2024090360
SB20241230139
SB2024090385
#VU96202 - Improper input validation
CVE-2024-42261
CWE-20 Low
No
No
10.0.9.0 19.08.2024 SB20240819145
SB2024121257
SB2024121258
and 4 more
#VU96201 - Improper input validation
CVE-2024-42260
CWE-20 Low
No
No
10.0.9.0 19.08.2024 SB20240819144
SB2024121257
SB2024121258
and 4 more
#VU96159 - Improper Locking
CVE-2024-42268
CWE-667 Low
No
No
10.0.9.0 19.08.2024 SB20240819100
SB2024083048
SB2024091077
and 13 more
#VU96146 - NULL Pointer Dereference
CVE-2024-42269
CWE-476 Low
No
No
10.0.9.0 19.08.2024 SB2024081987
SB2024083048
SB2024091080
and 14 more
#VU96101 - Missing release of memory after effective lifetime
CVE-2024-42263
CWE-401 Low
No
No
10.0.9.0 19.08.2024 SB2024081943
SB2024121257
SB2024121258
and 4 more
#VU94672 - Use After Free
CVE-2024-41012
CWE-416 Low
No
No
10.0.9.0 23.07.2024 SB2024072330
SB2024081301
SB2024081372
and 62 more
#VU89624 - Resource Management Errors
CVE-2024-4603
CWE-399 Low
No
No
10.0.9.0 17.05.2024 SB2024051715
SB2024052732
SB2024060735
and 65 more
#VU83999 - Unprotected Storage of Credentials
CVE-2023-47722
CWE-256 Low
No
No
10.0.5.4, 10.0.7.0 08.12.2023 SB2023120807
#VU81213 - Improper input validation
CVE-2022-34350
CWE-20 Medium
No
No
10.0.1.8, 10.0.5.1, 2018.4.1.24 27.09.2023 SB2023092710
#VU73974 - Improper Access Control
CVE-2023-28522
CWE-284 Low
No
No
10.0.1.11, 10.0.5.2 23.03.2023 SB2023032320
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
10.0.1.12, 10.0.5.3 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304
CWE-208 Medium
No
No
10.0.1.12, 10.0.5.3 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286
CWE-843 High
No
No
10.0.1.12, 10.0.5.3 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU65495 - Improper input validation
CVE-2022-34169
CWE-20 High
Available
No
10.0.1.9, 10.0.5.1 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more


Showing elements 181 - 200 out of 236