Known vulnerabilities in IBM App Connect Professional - page 2

Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_professional:*:*:*:*:*:*:*:*
Total vulnerabilities: 75
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM App Connect Professional IBM App Connect Professional is affected by 75 known vulnerabilities: 1 critical, 1 high, 49 medium, 24 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87510 - Improper input validation
CVE-2024-24549
CWE-20 Medium
Available
No
7.5.5.0.24 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU87509 - Resource exhaustion
CVE-2024-23672
CWE-400 Medium
No
No
7.5.5.0.24 13.03.2024 SB2024031386
SB2024032821
SB2024032824
and 49 more
#VU85468 - Improper input validation
CVE-2024-20918
CWE-20 Medium
No
No
7.5.5.0.24 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85469 - Improper input validation
CVE-2024-20952
CWE-20 Medium
No
No
7.5.5.0.24 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85470 - Improper input validation
CVE-2024-20919
CWE-20 Medium
No
No
7.5.5.0.24 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85471 - Improper input validation
CVE-2024-20921
CWE-20 Medium
No
No
7.5.5.0.24 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85472 - Improper input validation
CVE-2024-20926
CWE-20 Medium
No
No
7.5.5.0.24 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945
CWE-20 Low
No
No
7.5.5.0.24 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589
CWE-444 Medium
No
No
- 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU83267 - Improper input validation
CVE-2023-5676
CWE-20 Low
No
No
- 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU82690 - Deserialization of Untrusted Data
CVE-2023-46604
CWE-502 Critical
Available
Exploited
- 02.11.2023 SB2023110251
SB2023111311
SB2023112410
and 36 more
#VU82583 - Observable discrepancy
CVE-2023-33850
CWE-203 Medium
No
No
7.5.5.0.24 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU82140 - Improper input validation
CVE-2023-22067
CWE-20 Medium
No
No
- 17.10.2023 SB2023101797
SB2023101924
SB2023101990
and 117 more
#VU82141 - Improper input validation
CVE-2023-22081
CWE-20 Medium
No
No
- 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU81803 - Exposed Dangerous Method or Function
CVE-2023-42794
CWE-749 Medium
No
No
- 10.10.2023 SB2023101084
SB2023101286
SB2023111528
and 22 more
#VU81800 - Resource Management Errors
CVE-2023-42795
CWE-399 Medium
No
No
- 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648
CWE-444 Medium
No
No
- 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080
CWE-601 Medium
Available
No
- 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU78413 - Improper input validation
CVE-2023-22045
CWE-20 Low
No
No
- 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049
CWE-20 Low
No
No
- 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more


Showing elements 21 - 40 out of 75