Known vulnerabilities in IBM App Connect Enterprise - page 12

Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 397
Public exploits: 34
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM App Connect Enterprise IBM App Connect Enterprise is affected by 397 known vulnerabilities: 4 critical, 46 high, 256 medium, 91 low Critical High Medium Low

Vulnerabilities (397)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86800 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-4218
CWE-611 Low
No
No
11.0.0.24, 12.0.11.1 26.02.2024 SB2024022642
SB2024030105
SB2024032906
and 11 more
#VU85601 - Improper Restriction of Excessive Authentication Attempts
CVE-2024-22317
CWE-307 High
No
No
- 19.01.2024 SB2024011903
#VU83545 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-46337
CWE-90 High
No
No
11.0.0.24, 12.0.11.1 28.11.2023 SB2023112861
SB2024011806
SB2024020107
and 34 more
#VU83385 - Resource exhaustion
CVE-2023-5632
CWE-400 Medium
No
No
11.0.0.23, 12.0.10.1 21.11.2023 SB2023112176
SB2023112218
SB2023102806
and 2 more
#VU83267 - Improper input validation
CVE-2023-5676
CWE-20 Low
No
No
11.0.0.24, 12.0.11.0 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU82558 - Cross-Site Request Forgery (CSRF)
CVE-2023-45857
CWE-352 Low
No
No
11.0.0.24, 12.0.11.0 30.10.2023 SB2023103024
SB2023113014
SB2023121224
and 41 more
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642
CWE-770 Medium
No
No
11.0.0.23, 12.0.10.1 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU82349 - Cryptographic Issues
CVE-2023-5363
CWE-310 Low
No
No
11.0.0.24, 12.0.10.1 24.10.2023 SB2023102443
SB2023102448
SB2023102534
and 46 more
#VU82299 - Heap-based Buffer Overflow
CVE-2023-45853
CWE-122 Medium
No
No
11.0.0.24, 12.0.10.1 23.10.2023 SB2023102325
SB2023102633
SB2023102634
and 40 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072
CWE-770 Medium
No
No
11.0.0.24, 12.0.11.1 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU82140 - Improper input validation
CVE-2023-22067
CWE-20 Medium
No
No
11.0.0.24, 12.0.11.0 17.10.2023 SB2023101797
SB2023101924
SB2023101990
and 117 more
#VU82141 - Improper input validation
CVE-2023-22081
CWE-20 Medium
No
No
11.0.0.24, 12.0.11.0 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU82066 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45143
CWE-200 Medium
No
No
12.0.10.1 17.10.2023 SB2023101702
SB2023101703
SB2023101801
and 31 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545
CWE-122 High
Available
No
12.0.10.1 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546
CWE-73 Low
No
No
12.0.10.1 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
11.0.0.23, 12.0.10.1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU80732 - Resource exhaustion
CVE-2023-38039
CWE-400 Medium
No
No
12.0.10.1 13.09.2023 SB2023091327
SB2023091363
SB2023091402
and 33 more
#VU80565 - Improper input validation
CVE-2023-4807
CWE-20 Low
No
No
11.0.0.23, 12.0.10.1 08.09.2023 SB2023090834
SB2023092109
SB2023110126
and 45 more
#VU78798 - Resource Management Errors
CVE-2023-3817
CWE-399 Low
No
No
11.0.0.23, 12.0.10.0 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446
CWE-399 Medium
No
No
11.0.0.23, 12.0.10.0 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more


Showing elements 221 - 240 out of 397