Known vulnerabilities in IBM App Connect Enterprise - page 9

Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 361
Public exploits: 34
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM App Connect Enterprise IBM App Connect Enterprise is affected by 361 known vulnerabilities: 4 critical, 44 high, 229 medium, 84 low Critical High Medium Low

Vulnerabilities (361)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89501 - Allocation of Resources Without Limits or Throttling
CVE-2024-28760
CWE-770 Low
No
No
11.0.0.26, 12.0.12.1 15.05.2024 SB2024051507
#VU89500 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-28761
CWE-79 Low
No
No
11.0.0.26, 12.0.12.1 15.05.2024 SB2024051506
#VU88532 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-29041
CWE-601 Medium
No
No
11.0.0.26, 12.0.12.0 15.04.2024 SB2024041530
SB2024041532
SB2024042918
and 44 more
#VU88224 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-27307
CWE-1321 High
No
No
12.0.11.3 09.04.2024 SB2024040935
SB2024040936
SB2024060322
and 2 more
#VU88176 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-27982
CWE-444 Medium
No
No
11.0.0.26, 12.0.12.1 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 53 more
#VU88175 - Reachable Assertion
CVE-2024-27983
CWE-617 Medium
Available
No
11.0.0.26, 12.0.12.1 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 56 more
#VU87734 - Resource exhaustion
CVE-2024-28863
CWE-400 Medium
No
No
11.0.0.26, 12.0.12.1 22.03.2024 SB2024032234
SB2024052306
SB2024061114
and 30 more
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849
CWE-200 Low
No
No
11.0.0.26, 12.0.12.0 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU87329 - Resource exhaustion
CVE-2024-28176
CWE-400 Medium
No
No
12.0.11.3 11.03.2024 SB2024031123
SB2024031446
SB2024031447
and 37 more
#VU87128 - Improper input validation
CVE-2024-25016
CWE-20 Medium
No
No
11.0.0.25, 12.0.12.0 05.03.2024 SB2024030526
SB2024030614
SB2024031536
and 7 more
#VU86808 - Resource exhaustion
CVE-2024-22201
CWE-400 Medium
No
No
11.0.0.26, 12.0.12.0 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU86807 - Out-of-bounds read
CVE-2024-25629
CWE-125 Low
No
No
12.0.12.0 26.02.2024 SB2024022648
SB2024030621
SB2024032954
and 38 more
#VU86733 - Improper input validation
CVE-2024-22025
CWE-20 Medium
No
No
11.0.0.25, 12.0.11.3 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 34 more
#VU86724 - Covert Timing Channel
CVE-2023-46809
CWE-385 Medium
No
No
11.0.0.25, 12.0.11.3 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 35 more
#VU86721 - Improper input validation
CVE-2024-22019
CWE-20 Medium
No
No
11.0.0.25, 12.0.11.3 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 48 more
#VU86718 - Improper Handling of Exceptional Conditions
CVE-2024-21892
CWE-755 Low
No
No
11.0.0.25, 12.0.11.3 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 30 more
#VU86709 - Exposure of sensitive information to an unauthorized actor
CVE-2024-24758
CWE-200 Low
No
No
11.0.0.25, 12.0.11.3 22.02.2024 SB2024022211
SB2024022225
SB2024022832
and 13 more
#VU86707 - Server-Side Request Forgery (SSRF)
CVE-2024-24806
CWE-918 Medium
No
No
11.0.0.25, 12.0.11.3 22.02.2024 SB2024022210
SB2024022214
SB2024022225
and 54 more
#VU86625 - Resource exhaustion
CVE-2024-26308
CWE-400 Medium
No
No
11.0.0.26, 12.0.12.2 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710
CWE-835 Medium
No
No
11.0.0.26, 12.0.12.2 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more


Showing elements 161 - 180 out of 361