Known vulnerabilities in IBM App Connect Enterprise - page 16

Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 397
Public exploits: 34
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM App Connect Enterprise IBM App Connect Enterprise is affected by 397 known vulnerabilities: 4 critical, 46 high, 256 medium, 91 low Critical High Medium Low

Vulnerabilities (397)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75608 - Information Exposure Through Log Files
CVE-2022-42436
CWE-532 Low
No
No
11.0.0.20, 12.0.8.0 01.05.2023 SB2023050120
SB2023050121
SB2023050122
and 1 more
#VU75603 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-0842
CWE-1321 Medium
No
No
11.0.0.21, 12.0.8.0 01.05.2023 SB2023050113
SB2023050917
SB2023052413
and 12 more
#VU75590 - Improper input validation
CVE-2022-43919
CWE-20 Medium
No
No
11.0.0.20, 12.0.8.0 28.04.2023 SB2023042847
SB2023042852
SB2023051921
and 2 more
#VU75217 - Improper input validation
CVE-2023-26049
CWE-20 Low
No
No
- 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU72146 - Improper input validation
CVE-2012-5784
CWE-20 Medium
No
No
- 13.02.2023 SB2023021403
SB2023061227
SB2024022640
and 3 more
#VU71253 - Improper input validation
CVE-2022-3510
CWE-20 Medium
No
No
11.0.0.20, 12.0.8.0 17.01.2023 SB2023011753
SB2023011787
SB2023013027
and 37 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533
CWE-345 Low
No
No
11.0.0.20, 12.0.8.0 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU69670 - Improper input validation
CVE-2022-3509
CWE-20 Medium
No
No
11.0.0.20, 12.0.8.0 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU69293 - Improper input validation
CVE-2022-3171
CWE-20 Medium
No
No
11.0.0.20, 12.0.8.0 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU68748 - Double Free
CVE-2022-42915
CWE-415 Medium
No
No
11.0.0.20, 12.0.8.0 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 26 more
#VU62608 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-29599
CWE-78 High
No
No
- 26.04.2022 SB2022042627
SB2022042724
SB2022050234
and 29 more
#VU60181 - Resource Management Errors
CVE-2021-22569
CWE-399 Medium
Available
No
11.0.0.20, 12.0.8.0 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more
#VU58484 - Improper input validation
CVE-2021-41039
CWE-20 Medium
No
No
- 02.12.2021 SB2021120206
SB2023042751
SB2023100231
and 4 more
#VU56021 - Improper input validation
CVE-2021-34432
CWE-20 Medium
No
No
- 22.08.2021 SB2021082202
SB2023042751
SB2022030748
and 1 more
#VU55435 - Missing release of memory after effective lifetime
CVE-2021-34431
CWE-401 Medium
No
No
- 29.07.2021 SB2021072917
SB2023042751
SB2023112143
#VU51876 - Resource exhaustion
CVE-2021-28165
CWE-400 Medium
No
No
- 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683
CWE-749 Medium
No
No
- 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more
#VU24468 - Improper input validation
CVE-2019-0227
CWE-20 Medium
Available
No
- 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU14296 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8032
CWE-79 Low
No
No
- 08.08.2018 SB2018080909
SB2018101810
SB2023021403
and 5 more
#VU41375 - Improper input validation
CVE-2014-3596
CWE-20 Medium
No
No
- 27.08.2014 SB2014082703
SB2014091802
SB2023021403
and 5 more


Showing elements 301 - 320 out of 397