Known vulnerabilities in IBM API Connect - page 9

Software CPE: cpe:2.3:a:ibm_corporation:ibm_api_connect:*:*:*:*:*:*:*:*
Total vulnerabilities: 236
Public exploits: 24
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM API Connect IBM API Connect is affected by 236 known vulnerabilities: 3 critical, 28 high, 73 medium, 132 low Critical High Medium Low

Vulnerabilities (236)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102072 - Protection Mechanism Failure
CVE-2024-45411
CWE-693 High
No
No
10.0.9.0 30.12.2024 SB2024123097
SB20241230139
SB2025021858
and 1 more
#VU102065 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45046
CWE-79 Low
No
No
10.0.9.0 30.12.2024 SB2024123089
SB20241230139
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744
CWE-1059 Low
No
No
10.0.9.0 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU100117 - Improper input validation
CVE-2024-21534
CWE-20 High
Available
No
10.0.9.0 08.11.2024 SB2024110840
SB2024110841
SB2024111516
and 17 more
#VU97688 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6485
CWE-79 Medium
No
No
10.0.9.0 25.09.2024 SB2024092512
SB20241230139
SB2025060920
and 3 more
#VU97604 - Improper Verification of Cryptographic Signature
CVE-2024-42461
CWE-347 Medium
No
No
10.0.9.0 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 24 more
#VU97217 - Resource exhaustion
CVE-2024-34158
CWE-400 Medium
No
No
10.0.9.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 76 more
#VU97216 - Resource exhaustion
CVE-2024-34156
CWE-400 Medium
No
No
10.0.9.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU97215 - Resource exhaustion
CVE-2024-34155
CWE-400 Medium
No
No
10.0.9.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU96204 - Improper input validation
CVE-2024-42267
CWE-20 Low
No
No
10.0.9.0 19.08.2024 SB20240819148
SB2024083048
SB2024090669
and 13 more
#VU96203 - Improper input validation
CVE-2024-42265
CWE-20 Low
No
No
10.0.9.0 19.08.2024 SB20240819147
SB2024083048
SB2024083049
and 55 more
#VU96145 - NULL Pointer Dereference
CVE-2024-42270
CWE-476 Low
No
No
10.0.9.0 19.08.2024 SB2024081986
SB2024083048
SB2024091080
and 14 more
#VU96105 - Use After Free
CVE-2024-42271
CWE-416 Low
No
No
10.0.9.0 19.08.2024 SB2024081947
SB2024083049
SB2024083050
and 55 more
#VU96102 - Missing release of memory after effective lifetime
CVE-2024-42264
CWE-401 Low
No
No
10.0.9.0 19.08.2024 SB2024081944
SB2024121257
SB2024121258
and 4 more
#VU96100 - Missing release of memory after effective lifetime
CVE-2024-42262
CWE-401 Low
No
No
10.0.9.0 19.08.2024 SB2024081942
SB2024121257
SB2024121258
and 4 more
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338
CWE-918 Medium
No
No
10.0.9.0 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU96037 - Expired pointer dereference
CVE-2024-39792
CWE-825 Medium
No
No
10.0.9.0 15.08.2024 SB2024081520
SB20241230139
SB2025032042
#VU96020 - Out-of-bounds read
CVE-2024-7347
CWE-125 Medium
No
No
10.0.9.0 14.08.2024 SB2024081481
SB2024081706
SB2024081707
and 25 more
#VU94996 - Improper Locking
CVE-2024-41020
CWE-667 Low
No
No
10.0.9.0 31.07.2024 SB2024073179
SB2024080569
SB2024080967
and 48 more
#VU93424 - Out-of-bounds read
CVE-2024-5535
CWE-125 Low
Available
No
10.0.9.0 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more


Showing elements 161 - 180 out of 236