Known vulnerabilities in IBM Automation Decision Services - page 4

Vendor: IBM Corporation
Software: IBM Automation Decision Services
Software CPE: cpe:2.3:a:ibm_corporation:ibm_automation_decision_services:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 117
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Automation Decision Services IBM Automation Decision Services is affected by 117 known vulnerabilities: 1 critical, 8 high, 74 medium, 34 low Critical High Medium Low

Vulnerabilities (117)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96953 - Incorrect Default Permissions
CVE-2024-5321		 CWE-276 Low
No
No
 24.0.0.0.2 09.09.2024 SB2024090936
SB2024090937
SB2024090938
and 7 more
#VU92402 - Integer overflow
CVE-2024-23082		 CWE-190 Medium
No
No
 23.0.2.0.5 20.06.2024 SB20240620116
SB2024070317
SB2024071108
and 1 more
#VU92401 - NULL Pointer Dereference
CVE-2024-23081		 CWE-476 Medium
No
No
 23.0.2.0.5 20.06.2024 SB20240620116
SB2024070317
SB2024071108
and 1 more
#VU89350 - Cleartext Storage of Sensitive Information
CVE-2024-31906		 CWE-312 Low
No
No
 23.0.2.0.4 10.05.2024 SB2024051041
#VU88184 - Resource exhaustion
CVE-2023-45288		 CWE-400 Medium
Available
No
 23.0.2.0.5 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259		 CWE-918 Medium
No
No
 23.0.2.0.4 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU87607 - Improper Access Control
CVE-2024-22257		 CWE-284 Medium
No
No
 23.0.2.0.4 19.03.2024 SB2024031915
SB2024041659
SB2024041660
and 26 more
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849		 CWE-200 Low
No
No
 23.0.2.0.5 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU87197 - Resource exhaustion
CVE-2023-45290		 CWE-400 Medium
No
No
 24.0.0.0.3 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 24.0.0.0.3 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86992 - Allocation of Resources Without Limits or Throttling
CVE-2024-21634		 CWE-770 Medium
No
No
 23.0.2.0.2 04.03.2024 SB2024030419
SB2024031125
SB2024032143
and 18 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 23.0.2.0.3 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 23.0.2.0.3 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU83899 - Missing Encryption of Sensitive Data
CVE-2023-46219		 CWE-311 Medium
No
No
 23.0.2.0.2 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 31 more
#VU83508 - Off-by-one Error
CVE-2023-47038		 CWE-193 High
No
No
 23.0.2.0.2 27.11.2023 SB2023112761
SB2023112763
SB2023112959
and 33 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635		 CWE-681 Medium
No
No
 23.0.2.0.5 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU79586 - Access of Uninitialized Pointer
CVE-2023-36054		 CWE-824 Medium
No
No
 23.0.2.0.2 16.08.2023 SB2023081621
SB2023081623
SB2023081624
and 51 more
#VU79561 - Out-of-bounds write
CVE-2023-4016		 CWE-787 High
No
No
 23.0.2.0.2 15.08.2023 SB2023081548
SB20230821203
SB2023082925
and 49 more
#VU62512 - Improper input validation
CVE-2021-3572		 CWE-20 Medium
No
No
 23.0.2.0.5 22.04.2022 SB2022042257
SB2022042259
SB2021071390
and 51 more
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813		 CWE-611 Medium
No
No
 23.0.2.0.4 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more


Showing elements 61 - 80 out of 117