Known vulnerabilities in IBM Automation Decision Services - page 5

Vendor: IBM Corporation
Software: IBM Automation Decision Services
Software CPE: cpe:2.3:a:ibm_corporation:ibm_automation_decision_services:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 117
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Automation Decision Services IBM Automation Decision Services is affected by 117 known vulnerabilities: 1 critical, 8 high, 74 medium, 34 low Critical High Medium Low

Vulnerabilities (117)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85618 - Deserialization of Untrusted Data
CVE-2023-6378		 CWE-502 Medium
No
No
 23.0.2.0.1 19.01.2024 SB2024011926
SB2024011927
SB2024012316
and 39 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 23.0.2.0.1 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU83270 - Improper Certificate Validation
CVE-2023-1409		 CWE-295 Medium
No
No
 23.0.1 IF003 20.11.2023 SB2023112014
SB2023112015
SB2024022302
and 2 more
#VU82558 - Cross-Site Request Forgery (CSRF)
CVE-2023-45857		 CWE-352 Low
No
No
 23.0.1 IF006 30.10.2023 SB2023103024
SB2023113014
SB2023121224
and 41 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 23.0.2.0.2 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81964 - Improper input validation
CVE-2023-39323		 CWE-20 Medium
No
No
 23.0.2.0.2 12.10.2023 SB2023101258
SB2023101259
SB2023101260
and 38 more
#VU81948 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-4759		 CWE-59 Medium
No
No
 23.0.2.0.1 12.10.2023 SB2023101242
SB2023101243
SB2023103012
and 21 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545		 CWE-122 High
Available
No
 23.0.1 IF003 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU80788 - Resource exhaustion
CVE-2023-42503		 CWE-400 Medium
No
No
 23.0.1 IF006 14.09.2023 SB2023091434
SB2023111725
SB2023112014
and 30 more
#VU79799 - Inefficient Regular Expression Complexity
CVE-2023-26115		 CWE-1333 Medium
No
No
 23.0.1 IF003 21.08.2023 SB2023082199
SB20230821104
SB2023082858
and 21 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 23.0.1 IF003 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Available
No
 23.0.1 IF006 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU75141 - Memory corruption
CVE-2023-29491		 CWE-119 Low
No
No
 23.0.1 IF003 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 23.0.1 IF003 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU71499 - Permissions, Privileges, and Access Controls
CVE-2023-24422		 CWE-264 Medium
No
No
 23.0.2.0.2 25.01.2023 SB2023012504
SB2023041270
SB2023041272
and 14 more
#VU69368 -
CVE-2022-45379		 Medium
No
No
 23.0.2.0.2 16.11.2022 SB2022111616
SB2023020889
SB2023022307
and 3 more
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996		 CWE-942 Low
No
No
 23.0.2.0.2 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more
#VU64274 - Out-of-bounds read
CVE-2022-29458		 CWE-125 Medium
No
No
 23.0.1 IF003 14.06.2022 SB2022061418
SB2022061419
SB2022072842
and 29 more
#VU63359 - Cross-Site Request Forgery (CSRF)
CVE-2022-30946		 CWE-352 Low
No
No
 23.0.2.0.2 18.05.2022 SB2022051808
SB2023011328
SB2023020889
and 4 more
#VU50820 - Permissions, Privileges, and Access Controls
CVE-2021-22112		 CWE-264 Medium
No
No
 23.0.2.0.2 22.02.2021 SB2021022207
SB2021022216
SB2021042314
and 8 more


Showing elements 81 - 100 out of 117