Known vulnerabilities in IBM App Connect Enterprise - page 15

Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 361
Public exploits: 34
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM App Connect Enterprise IBM App Connect Enterprise is affected by 361 known vulnerabilities: 4 critical, 44 high, 229 medium, 84 low Critical High Medium Low

Vulnerabilities (361)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75608 - Information Exposure Through Log Files
CVE-2022-42436
CWE-532 Low
No
No
11.0.0.20, 12.0.8.0 01.05.2023 SB2023050120
SB2023050121
SB2023050122
and 1 more
#VU75603 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-0842
CWE-1321 Medium
No
No
11.0.0.21, 12.0.8.0 01.05.2023 SB2023050113
SB2023050917
SB2023052413
and 12 more
#VU75590 - Improper input validation
CVE-2022-43919
CWE-20 Medium
No
No
11.0.0.20, 12.0.8.0 28.04.2023 SB2023042847
SB2023042852
SB2023051921
and 2 more
#VU73969 - Incorrect Regular Expression
CVE-2022-25927
CWE-185 Medium
No
No
12.0.8.0 23.03.2023 SB2023032313
SB2023032315
SB2023032710
and 19 more
#VU71999 - NULL Pointer Dereference
CVE-2023-0401
CWE-476 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 52 more
#VU71997 - Release of invalid pointer or reference
CVE-2023-0216
CWE-763 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 50 more
#VU71996 - Double Free
CVE-2022-4450
CWE-415 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71994 - Out-of-bounds read
CVE-2022-4203
CWE-125 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 47 more
#VU71253 - Improper input validation
CVE-2022-3510
CWE-20 Medium
No
No
11.0.0.20, 12.0.8.0 17.01.2023 SB2023011753
SB2023011787
SB2023013027
and 37 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533
CWE-345 Low
No
No
11.0.0.20, 12.0.8.0 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU69675 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24999
CWE-94 Medium
Available
No
11.0.0.17, 12.0.5.0 29.11.2022 SB2022112910
SB2022112911
SB2022112943
and 49 more
#VU69670 - Improper input validation
CVE-2022-3509
CWE-20 Medium
No
No
11.0.0.20, 12.0.8.0 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU69293 - Improper input validation
CVE-2022-3171
CWE-20 Medium
No
No
11.0.0.20, 12.0.8.0 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU68748 - Double Free
CVE-2022-42915
CWE-415 Medium
No
No
11.0.0.20, 12.0.8.0 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 26 more
#VU62608 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-29599
CWE-78 High
No
No
- 26.04.2022 SB2022042627
SB2022042724
SB2022050234
and 29 more
#VU60181 - Resource Management Errors
CVE-2021-22569
CWE-399 Medium
Available
No
11.0.0.20, 12.0.8.0 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more
#VU58484 - Improper input validation
CVE-2021-41039
CWE-20 Medium
No
No
- 02.12.2021 SB2021120206
SB2023042751
SB2023100231
and 4 more
#VU56021 - Improper input validation
CVE-2021-34432
CWE-20 Medium
No
No
- 22.08.2021 SB2021082202
SB2023042751
SB2022030748
and 1 more
#VU55435 - Missing release of memory after effective lifetime
CVE-2021-34431
CWE-401 Medium
No
No
- 29.07.2021 SB2021072917
SB2023042751
SB2023112143
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683
CWE-749 Medium
No
No
- 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more


Showing elements 281 - 300 out of 361