Known vulnerabilities in IBM Aspera Console - page 3

Vendor: IBM Corporation
Software: IBM Aspera Console
Software CPE: cpe:2.3:a:ibm_corporation:ibm_aspera_console:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 52
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Aspera Console IBM Aspera Console is affected by 52 known vulnerabilities: 1 critical, 3 high, 32 medium, 16 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88153 - Resource exhaustion
CVE-2024-27316		 CWE-400 Medium
Available
No
 3.4.2 PL 10 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU84776 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-38927		 CWE-79 Low
No
No
 3.4.2 PL6 26.12.2023 SB2023122621
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436		 CWE-113 Medium
No
No
 3.4.2 PL7 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU65553 - Out-of-bounds read
CVE-2022-1587		 CWE-125 Medium
No
No
 3.4.2 PL 10 20.07.2022 SB2022060210
SB20220720108
SB2022072733
and 24 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798		 CWE-476 Medium
No
No
 3.4.2 PL7 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU50745 - Improper input validation
CVE-2021-23840		 CWE-20 Medium
No
No
 3.4.2 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU50744 - Cryptographic Issues
CVE-2021-23839		 CWE-310 Low
No
No
 3.4.2 17.02.2021 SB2021021702
SB2021041501
SB2021041502
and 15 more
#VU50740 - NULL Pointer Dereference
CVE-2021-23841		 CWE-476 Medium
No
No
 3.4.2 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 66 more
#VU30256 - Out-of-bounds read
CVE-2019-20838		 CWE-125 Medium
No
No
 3.4.2 PL 10 15.06.2020 SB2020061529
SB2021010712
SB2021020201
and 24 more
#VU28228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7656		 CWE-79 Medium
No
No
 3.4.2 25.05.2020 SB2020052520
SB2020100907
SB2022072056
and 14 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 3.4.2 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 3.4.2 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more


Showing elements 41 - 60 out of 52