Known vulnerabilities in IBM App Connect Enterprise - page 17

Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 397
Public exploits: 34
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM App Connect Enterprise IBM App Connect Enterprise is affected by 397 known vulnerabilities: 4 critical, 46 high, 256 medium, 91 low Critical High Medium Low

Vulnerabilities (397)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73969 - Incorrect Regular Expression
CVE-2022-25927
CWE-185 Medium
No
No
12.0.8.0 23.03.2023 SB2023032313
SB2023032315
SB2023032710
and 19 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881
CWE-407 Medium
No
No
- 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU71999 - NULL Pointer Dereference
CVE-2023-0401
CWE-476 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 52 more
#VU71998 - NULL Pointer Dereference
CVE-2023-0217
CWE-476 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 49 more
#VU71997 - Release of invalid pointer or reference
CVE-2023-0216
CWE-763 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 50 more
#VU71996 - Double Free
CVE-2022-4450
CWE-415 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71994 - Out-of-bounds read
CVE-2022-4203
CWE-125 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 47 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304
CWE-208 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286
CWE-843 High
No
No
- 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU71660 - Memory corruption
CVE-2022-42444
CWE-119 Low
No
No
11.0.0.20, 12.0.6.0 30.01.2023 SB2023013047
#VU71659 - Exposure of sensitive information to an unauthorized actor
CVE-2022-42439
CWE-200 Low
No
No
11.0.0.20, 12.0.6.0 30.01.2023 SB2023013046
SB2023020327
#VU71577 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-46175
CWE-94 Medium
No
No
- 26.01.2023 SB2023012644
SB2023012645
SB2023013117
and 46 more
#VU71185 - Improper input validation
CVE-2022-23529
CWE-20 High
Available
No
11.0.0.20 16.01.2023 SB2023011632
SB2023011633
SB2023020132
and 12 more
#VU71182 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23540
CWE-327 High
Available
No
11.0.0.20 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 15 more
#VU71181 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23541
CWE-327 High
No
No
11.0.0.20 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 16 more
#VU71180 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23539
CWE-327 Medium
No
No
11.0.0.20 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 16 more
#VU69675 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24999
CWE-94 Medium
Available
No
11.0.0.17, 12.0.5.0 29.11.2022 SB2022112910
SB2022112911
SB2022112943
and 50 more
#VU68375 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-38712
CWE-451 Medium
No
No
- 18.10.2022 SB2022101803
SB2022111011
SB2022122019
and 6 more
#VU67663 - Out-of-bounds write
CVE-2022-38751
CWE-787 Medium
No
No
- 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more


Showing elements 321 - 340 out of 397