Known vulnerabilities in IBM App Connect Enterprise - page 8

Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 361
Public exploits: 34
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM App Connect Enterprise IBM App Connect Enterprise is affected by 361 known vulnerabilities: 4 critical, 44 high, 229 medium, 84 low Critical High Medium Low

Vulnerabilities (361)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97478 - Inefficient Regular Expression Complexity
CVE-2024-41818
CWE-1333 Medium
No
No
12.0.12.5 18.09.2024 SB2024091833
SB2024091834
SB2024092612
and 12 more
#VU97226 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-27267
CWE-362 Medium
No
No
12.0.12.6 12.09.2024 SB2024091291
SB2024091292
SB2024091618
and 57 more
#VU96716 - Incorrect Regular Expression
CVE-2024-39249
CWE-185 Medium
No
No
12.0.12.5 03.09.2024 SB2024090325
SB2024090326
SB2024090359
and 20 more
#VU94755 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-31573
CWE-94 Medium
No
No
12.0.12.3 26.07.2024 SB2024072633
SB2024072634
SB20240731208
and 9 more
#VU94556 - Improper input validation
CVE-2024-21145
CWE-20 Medium
No
No
12.0.12.6 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU94558 - Improper input validation
CVE-2024-21144
CWE-20 Low
No
No
12.0.12.6 18.07.2024 SB20240718154
SB20240718155
SB20240718192
and 114 more
#VU94559 - Improper input validation
CVE-2024-21131
CWE-20 Low
No
No
12.0.12.6 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU94329 - NULL Pointer Dereference
CVE-2024-37890
CWE-476 Medium
No
No
12.0.12.4 15.07.2024 SB2024071508
SB2024071933
SB2024081608
and 32 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067
CWE-185 Medium
No
No
12.0.12.3 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU92405 - Uncontrolled Memory Allocation
CVE-2024-4068
CWE-789 Medium
No
No
12.0.12.3 20.06.2024 SB20240620121
SB2024062833
SB2024070809
and 51 more
#VU89774 - Use of a Key Past its Expiration Date
CVE-2024-31893
CWE-324 Low
No
No
12.0.12.2 23.05.2024 SB2024052311
SB2024060630
#VU89771 - Use of a Key Past its Expiration Date
CVE-2024-31894
CWE-324 Low
No
No
12.0.12.2 23.05.2024 SB2024052311
SB2024060630
#VU89770 - Use of a Key Past its Expiration Date
CVE-2024-31895
CWE-324 Low
No
No
12.0.12.2 23.05.2024 SB2024052311
SB2024060630
#VU89764 - Uncaught Exception
CVE-2024-31904
CWE-248 Low
No
No
11.0.0.26, 12.0.12.1 23.05.2024 SB2024052307
SB2024060628
#VU89343 - Resource exhaustion
CVE-2023-38264
CWE-400 Medium
No
No
12.0.12.3 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU88899 - Insufficiently Protected Credentials
CVE-2023-50311
CWE-522 Low
No
No
12.0.12.3 23.04.2024 SB2024042301
SB2024072204
SB2024082611
#VU88898 - Insufficiently Protected Credentials
CVE-2023-50310
CWE-522 Low
No
No
12.0.12.3 23.04.2024 SB2024042301
SB2024072204
SB2024082611
#VU88669 - Improper input validation
CVE-2024-21012
CWE-20 Low
No
No
12.0.12.3 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 68 more
#VU88462 - Command injection
CVE-2024-27980
CWE-77 Medium
No
No
12.0.12.5 11.04.2024 SB2024041122
SB2024041155
SB2024041156
and 20 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Available
No
12.0.12.1 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more


Showing elements 141 - 160 out of 361