Known vulnerabilities in IBM Case Manager

Vendor: IBM Corporation
Software: IBM Case Manager
Software CPE: cpe:2.3:a:ibm_corporation:ibm_case_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 20
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Case Manager IBM Case Manager is affected by 20 known vulnerabilities: 1 high, 12 medium, 7 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114444 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4768		 CWE-79 Low
No
No
 - 26.08.2025 SB2022051409
#VU82534 - Resource exhaustion
CVE-2013-4002		 CWE-400 Medium
No
No
 5.3.3-IF011 27.10.2023 SB2023102710
SB2023102722
SB2023103009
and 14 more
#VU70524 - Out-of-bounds write
CVE-2022-41854		 CWE-787 Medium
No
No
 5.3.3-IF011 28.12.2022 SB2022122813
SB2022122926
SB2023010417
and 52 more
#VU68827 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42890		 CWE-94 Low
No
No
 5.3.3-IF011 30.10.2022 SB2022103004
SB2022103009
SB2023030742
and 34 more
#VU68826 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-41704		 CWE-94 High
No
No
 5.3.3-IF011 30.10.2022 SB2022103004
SB2022103009
SB2023030742
and 14 more
#VU67586 - Server-Side Request Forgery (SSRF)
CVE-2022-38648		 CWE-918 Medium
No
No
 5.3.3-IF011 22.09.2022 SB2022092232
SB2023030742
SB2023040503
and 14 more
#VU67585 - Server-Side Request Forgery (SSRF)
CVE-2022-40146		 CWE-918 Medium
Available
No
 5.3.3-IF011 22.09.2022 SB2022092232
SB2023011763
SB2023011838
and 21 more
#VU67584 - Server-Side Request Forgery (SSRF)
CVE-2022-38398		 CWE-918 Medium
No
No
 5.3.3-IF011 22.09.2022 SB2022092232
SB2023030742
SB2023040503
and 14 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 5.3.3-IF011 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU55416 - Improper input validation
CVE-2012-0881		 CWE-20 Medium
No
No
 5.3.3-IF011 28.07.2021 SB2021072822
SB2023070731
SB2023102710
and 19 more
#VU54856 - Resource exhaustion
CVE-2021-36374		 CWE-400 Medium
No
No
 5.3.3-IF011 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 43 more
#VU54855 - Resource exhaustion
CVE-2021-36373		 CWE-400 Medium
No
No
 5.3.3-IF011 14.07.2021 SB2021071409
SB2021072011
SB2022080830
and 16 more
#VU54291 - Server-Side Request Forgery (SSRF)
CVE-2020-11988		 CWE-918 Medium
No
No
 5.3.3-IF011 21.06.2021 SB2021062143
SB2021062144
SB2021062145
and 15 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 5.3.3-IF011 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU29068 - Server-Side Request Forgery (SSRF)
CVE-2019-17566		 CWE-918 Medium
No
No
 5.3.3-IF011 16.06.2020 SB2020061613
SB2020062304
SB2020072310
and 23 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 5.3.3-IF011 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU15969 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-1884		 CWE-22 Medium
No
No
 5.2.0.4-ICM-IF003, 5.2.1.7-ICM-IF004, 5.3.3.0-ICM-IF003 30.11.2018 SB2018112005
#VU13547 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-8036		 CWE-835 Low
No
No
 5.3.3-IF011 03.07.2018 SB2018070304
SB2018090711
SB2018102421
and 7 more
#VU13059 - Deserialization of Untrusted Data
CVE-2018-8013		 CWE-502 Low
No
No
 5.3.3-IF011 30.05.2018 SB2018053011
SB2018060503
SB2019011705
and 16 more
#VU12886 - Uncontrolled Memory Allocation
CVE-2018-10237		 CWE-789 Low
No
No
 5.3.3-IF011 21.05.2018 SB2018052310
SB2018083005
SB2018092411
and 43 more