Known vulnerabilities in IBM Cloud Automation Manager - page 2

Vendor: IBM Corporation
Software: IBM Cloud Automation Manager
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_automation_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 49
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Automation Manager IBM Cloud Automation Manager is affected by 49 known vulnerabilities: 5 high, 34 medium, 10 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76190 - Improper Certificate Validation
CVE-2021-31597		 CWE-295 Medium
No
No
 - 16.05.2023 -
#VU76189 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-28502		 CWE-94 Medium
Available
No
 - 16.05.2023 -
#VU76061 - Incorrect Regular Expression
CVE-2022-21680		 CWE-185 Medium
No
No
 - 12.05.2023 -
#VU70542 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23449		 CWE-94 High
No
No
 - 30.12.2022 -
#VU63702 - Allocation of Resources Without Limits or Throttling
CVE-2020-15168		 CWE-770 Medium
No
No
 - 26.05.2022 -
#VU59319 - Origin Validation Error
CVE-2021-3618		 CWE-346 Medium
No
No
 4.2.0.1 iFix 4 09.01.2022 SB2022010903
SB2022010904
SB2022010905
and 37 more
#VU59042 - Resource exhaustion
CVE-2021-44717		 CWE-400 Medium
No
No
 - 16.12.2021 -
#VU56912 - Resource exhaustion
CVE-2021-29469		 CWE-400 Low
No
No
 - 29.09.2021 -
#VU54394 - Incorrect Regular Expression
CVE-2020-28500		 CWE-185 Medium
No
No
 - 27.06.2021 -
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 - 12.05.2021 -
#VU52985 - Incorrect Regular Expression
CVE-2020-28469		 CWE-185 Medium
No
No
 - 10.05.2021 -
#VU52909 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7774		 CWE-94 Medium
No
No
 - 06.05.2021 -
#VU51767 - Server-Side Request Forgery (SSRF)
CVE-2021-28918		 CWE-918 Medium
No
No
 - 29.03.2021 -
#VU50273 - Permissions, Privileges, and Access Controls
CVE-2021-21284		 CWE-264 Medium
No
No
 - 02.02.2021 -
#VU50274 - Resource exhaustion
CVE-2021-21285		 CWE-400 Medium
No
No
 - 02.02.2021 -
#VU50047 - Incorrect Calculation
CVE-2021-3114		 CWE-682 Medium
No
No
 - 26.01.2021 -
#VU48480 - Improper input validation
CVE-2020-28362		 CWE-20 Medium
No
No
 - 17.11.2020 -
#VU46580 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-24553		 CWE-79 Low
No
No
 - 02.09.2020 -
#VU47482 - Command injection
CVE-2020-8178		 CWE-77 High
No
No
 Not fixed 15.07.2020 -
#VU29032 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7676		 CWE-79 Low
No
No
 - 16.06.2020 -


Showing elements 21 - 40 out of 49