Known vulnerabilities in IBM Automation Decision Services 23.0.1 IF004

Vendor: IBM Corporation
Software: IBM Automation Decision Services
Version: 23.0.1 IF004
Software CPE: cpe:2.3:a:ibm_corporation:ibm_automation_decision_services:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Automation Decision Services version 23.0.1 IF004 IBM Automation Decision Services 23.0.1 IF004 is affected by 15 vulnerabilities: 1 high, 7 medium, 7 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83993 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-46233		 CWE-327 Medium
No
No
 23.0.1 IF005 08.12.2023 SB2023120805
SB2023121211
SB2023122252
and 6 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 23.0.1 IF005 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU82227 - Incorrect Authorization
CVE-2023-34035		 CWE-863 Medium
No
No
 23.0.1 IF005 18.10.2023 SB2023071828
SB2023122252
SB2023122810
and 3 more
#VU80942 - Incorrect Default Permissions
CVE-2023-43498		 CWE-276 Low
No
No
 23.0.1 IF005 21.09.2023 SB2023092107
SB2023122252
SB2023122810
#VU80941 - Incorrect Default Permissions
CVE-2023-43497		 CWE-276 Low
No
No
 23.0.1 IF005 21.09.2023 SB2023092107
SB2023122252
SB2023122810
#VU80937 - Incorrect Default Permissions
CVE-2023-43496		 CWE-276 Low
No
No
 23.0.1 IF005 21.09.2023 SB2023092107
SB2023122252
SB2023122810
and 4 more
#VU80936 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-43495		 CWE-79 Low
No
No
 23.0.1 IF005 21.09.2023 SB2023092107
SB2023122252
SB2023122810
#VU80935 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43494		 CWE-200 Low
No
No
 23.0.1 IF005 21.09.2023 SB2023092107
SB2023122252
SB2023122810
#VU80880 - Security Features
CVE-2023-34034		 CWE-254 High
No
No
 23.0.1 IF005 19.09.2023 SB2023091914
SB2023100926
SB20231017104
and 22 more
#VU80813 - Security Features
CVE-2023-4853		 CWE-254 Medium
No
No
 23.0.1 IF005 15.09.2023 SB2023091507
SB2023092243
SB2023092247
and 13 more
#VU80793 - Improper Authorization
CVE-2023-41900		 CWE-285 Low
No
No
 23.0.1 IF005 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 29 more
#VU80792 - Improper input validation
CVE-2023-36479		 CWE-20 Medium
No
No
 23.0.1 IF005 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 23.0.1 IF005 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU78704 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39151		 CWE-79 Low
No
No
 23.0.1 IF005 27.07.2023 SB2023072714
SB2023122252
SB2023122810
#VU54077 - Resource exhaustion
CVE-2021-33503		 CWE-400 Medium
No
No
 23.0.1 IF005 13.06.2021 SB2021061304
SB2021061305
SB2021071501
and 36 more