Known vulnerabilities in IBM API Connect - page 11

Software CPE: cpe:2.3:a:ibm_corporation:ibm_api_connect:*:*:*:*:*:*:*:*
Total vulnerabilities: 236
Public exploits: 24
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM API Connect IBM API Connect is affected by 236 known vulnerabilities: 3 critical, 28 high, 73 medium, 132 low Critical High Medium Low

Vulnerabilities (236)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68896 - Memory corruption
CVE-2022-3786
CWE-119 Medium
Available
No
10.0.1.9, 10.0.5.2 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 44 more
#VU68895 - Memory corruption
CVE-2022-3602
CWE-119 High
Available
No
10.0.1.9, 10.0.5.2 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 45 more
#VU65693 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-33194
CWE-835 Medium
No
No
10.0.1.4, 2018.4.1.17 22.07.2022 SB2021052653
SB2022072210
SB2022081842
and 16 more
#VU58272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41182
CWE-79 Medium
No
No
10.0.1.8, 10.0.5.1 20.11.2021 SB2021112002
SB2022011944
SB2022011946
and 32 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184
CWE-79 Medium
Available
No
10.0.1.8, 10.0.5.1 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU58270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41183
CWE-79 Medium
No
No
10.0.1.8, 10.0.5.1 20.11.2021 SB2021112002
SB2022011943
SB2022011944
and 33 more
#VU53604 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33829
CWE-79 Low
No
No
10.0.1.4, 10.0.3, 2018.4.1.17 27.05.2021 SB2021052701
SB2021052702
SB2021052704
and 8 more
#VU53543 - Off-by-one Error
CVE-2021-23017
CWE-193 High
Available
No
5.0.8.12 25.05.2021 SB2021052543
SB2021052713
SB2021052901
and 48 more
#VU51485 - Improper input validation
CVE-2021-27919
CWE-20 Medium
No
No
10.0.1.2, 10.0.3, 2018.4.1.17 15.03.2021 SB2021031515
SB2022080503
SB2022090717
and 4 more
#VU46580 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-24553
CWE-79 Low
No
No
10.0.1.4, 10.0.3, 2018.4.1.17 02.09.2020 SB2020090217
SB2020091020
SB2020091021
and 20 more
#VU26528 - Use of Uninitialized Variable
CVE-2020-1934
CWE-457 Medium
No
No
5.0.8.12 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 20 more
#VU26527 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-1927
CWE-601 Medium
No
No
5.0.8.12 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 17 more
#VU20384 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10092
CWE-79 Low
No
No
5.0.8.12 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU20374 - Improper input validation
CVE-2019-10098
CWE-20 Medium
Available
No
5.0.8.12 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 19 more
#VU18923 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-20843
CWE-611 Medium
Available
No
5.0.8.12 27.06.2019 SB2019062808
SB2019070104
SB2019072102
and 30 more
#VU18113 - Improper input validation
CVE-2019-0220
CWE-20 Low
No
No
5.0.8.12 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more
#VU18110 - Permissions, Privileges, and Access Controls
CVE-2019-0211
CWE-264 Low
Available
Exploited
5.0.8.12 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 21 more
#VU11284 - Permissions, Privileges, and Access Controls
CVE-2017-15715
CWE-264 Low
No
No
5.0.8.12 27.03.2018 SB2018032703
SB2018040401
SB2018040502
and 13 more
#VU11283 - Out-of-bounds write
CVE-2017-15710
CWE-787 Medium
No
No
5.0.8.12 27.03.2018 SB2018032703
SB2018040401
SB2018040502
and 13 more
#VU11281 - Out-of-bounds read
CVE-2018-1301
CWE-125 Medium
No
No
5.0.8.12 27.03.2018 SB2018032703
SB2018040401
SB2018040502
and 13 more


Showing elements 201 - 220 out of 236