Known vulnerabilities in IBM App Connect Professional - page 3

Vendor: IBM Corporation
Software: IBM App Connect Professional
Software CPE: cpe:2.3:a:ibm_corporation:ibm_app_connect_professional:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 75
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM App Connect Professional IBM App Connect Professional is affected by 75 known vulnerabilities: 1 critical, 1 high, 49 medium, 24 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 - 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77622 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34981		 CWE-200 Medium
No
No
 - 22.06.2023 SB2023062241
SB2023070714
SB2023071901
and 24 more
#VU76906 - Out-of-bounds read
CVE-2023-2597		 CWE-125 High
No
No
 - 05.06.2023 SB2023060525
SB2023060705
SB2023060930
and 86 more
#VU76417 - Allocation of Resources Without Limits or Throttling
CVE-2023-28709		 CWE-770 Medium
No
No
 - 22.05.2023 SB2023052235
SB2023053003
SB2023053052
and 35 more
#VU75264 - Improper input validation
CVE-2023-21939		 CWE-20 Medium
Available
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75265 - Improper input validation
CVE-2023-21938		 CWE-20 Low
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968		 CWE-20 Low
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937		 CWE-20 Low
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75261 - Improper input validation
CVE-2023-21967		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU75262 - Improper input validation
CVE-2023-21954		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708		 CWE-614 Low
No
No
 - 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843		 CWE-20 Low
No
No
 - 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU68437 - Improper input validation
CVE-2022-21628		 CWE-20 Medium
No
No
 7.5.5.0 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 138 more
#VU68438 - Improper input validation
CVE-2022-21626		 CWE-20 Medium
No
No
 7.5.5.0 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68441 - Improper input validation
CVE-2022-21624		 CWE-20 Low
No
No
 7.5.5.0 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU68442 - Improper input validation
CVE-2022-21619		 CWE-20 Low
No
No
 7.5.5.0 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 140 more
#VU62399 - Improper input validation
CVE-2022-21426		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more


Showing elements 41 - 60 out of 75