Known vulnerabilities in IBM App Connect Enterprise - page 16

Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 361
Public exploits: 34
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM App Connect Enterprise IBM App Connect Enterprise is affected by 361 known vulnerabilities: 4 critical, 44 high, 229 medium, 84 low Critical High Medium Low

Vulnerabilities (361)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881
CWE-407 Medium
No
No
- 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU71998 - NULL Pointer Dereference
CVE-2023-0217
CWE-476 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 49 more
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304
CWE-208 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286
CWE-843 High
No
No
- 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU71660 - Memory corruption
CVE-2022-42444
CWE-119 Low
No
No
11.0.0.20, 12.0.6.0 30.01.2023 SB2023013047
#VU71659 - Exposure of sensitive information to an unauthorized actor
CVE-2022-42439
CWE-200 Low
No
No
11.0.0.20, 12.0.6.0 30.01.2023 SB2023013046
SB2023020327
#VU71577 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-46175
CWE-94 Medium
No
No
- 26.01.2023 SB2023012644
SB2023012645
SB2023013117
and 44 more
#VU71185 - Improper input validation
CVE-2022-23529
CWE-20 High
Available
No
11.0.0.20 16.01.2023 SB2023011632
SB2023011633
SB2023020132
and 12 more
#VU71182 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23540
CWE-327 High
Available
No
11.0.0.20 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 15 more
#VU71181 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23541
CWE-327 High
No
No
11.0.0.20 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 16 more
#VU71180 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23539
CWE-327 Medium
No
No
11.0.0.20 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 16 more
#VU70524 - Out-of-bounds write
CVE-2022-41854
CWE-787 Medium
No
No
- 28.12.2022 SB2022122813
SB2022122926
SB2023010417
and 52 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
- 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68375 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-38712
CWE-451 Medium
No
No
- 18.10.2022 SB2022101803
SB2022111011
SB2022122019
and 6 more
#VU67668 - Stack-based buffer overflow
CVE-2022-38750
CWE-121 Medium
No
No
- 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU67666 - Stack-based buffer overflow
CVE-2022-38749
CWE-121 Medium
No
No
- 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 51 more
#VU67665 - Resource exhaustion
CVE-2022-25857
CWE-400 Medium
No
No
- 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752
CWE-121 Medium
No
No
- 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more
#VU67663 - Out-of-bounds write
CVE-2022-38751
CWE-787 Medium
No
No
- 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more


Showing elements 301 - 320 out of 361