Known vulnerabilities in IBM Cloud Automation Manager - page 3

Vendor: IBM Corporation
Software: IBM Cloud Automation Manager
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_automation_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 68
Public exploits: 7
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Automation Manager IBM Cloud Automation Manager is affected by 68 known vulnerabilities: 8 high, 45 medium, 15 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77187 - Missing Encryption of Sensitive Data
CVE-2019-4616		 CWE-311 Low
No
No
 3.2.1.1, 3.2.1.2 13.06.2023 SB2020110639
#VU77186 - Session Fixation
CVE-2019-4617		 CWE-384 Low
No
No
 3.2.1.1 13.06.2023 SB2020110638
#VU76124 - Out-of-bounds read
CVE-2020-8244		 CWE-125 Medium
No
No
 4.2.0.1 iFix 1 15.05.2023 SB2023051504
SB2020110620
SB2023051630
and 6 more
#VU63702 - Allocation of Resources Without Limits or Throttling
CVE-2020-15168		 CWE-770 Medium
No
No
 - 26.05.2022 SB2020091032
SB2022052615
SB2022060618
and 12 more
#VU54394 - Incorrect Regular Expression
CVE-2020-28500		 CWE-185 Medium
No
No
 - 27.06.2021 SB2021062702
SB2021062703
SB2021090905
and 30 more
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 - 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 60 more
#VU52985 - Incorrect Regular Expression
CVE-2020-28469		 CWE-185 Medium
No
No
 - 10.05.2021 SB2021051002
SB2021051004
SB2021072625
and 26 more
#VU52909 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7774		 CWE-94 Medium
No
No
 - 06.05.2021 SB2020111735
SB2021050615
SB2021092814
and 24 more
#VU50273 - Permissions, Privileges, and Access Controls
CVE-2021-21284		 CWE-264 Medium
No
No
 - 02.02.2021 SB2021020305
SB2021020611
SB2021020922
and 9 more
#VU50274 - Resource exhaustion
CVE-2021-21285		 CWE-400 Medium
No
No
 - 02.02.2021 SB2021020305
SB2021020611
SB2021020923
and 9 more
#VU50047 - Incorrect Calculation
CVE-2021-3114		 CWE-682 Medium
No
No
 - 26.01.2021 SB2021012714
SB2021012715
SB20210120130
and 40 more
#VU48480 - Improper input validation
CVE-2020-28362		 CWE-20 Medium
No
No
 - 17.11.2020 SB2020111715
SB2020111716
SB2020111225
and 30 more
#VU47225 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7720		 CWE-94 Medium
No
No
 - 30.09.2020 SB20200930105
SB2020122208
SB2020112518
#VU46580 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-24553		 CWE-79 Low
No
No
 - 02.09.2020 SB2020090217
SB2020091020
SB2020091021
and 20 more
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-16845		 CWE-835 Medium
No
No
 - 14.08.2020 SB2020081403
SB2020081404
SB2020081405
and 44 more
#VU47482 - Command injection
CVE-2020-8178		 CWE-77 High
No
No
 - 15.07.2020 SB2020100903
SB2020112515
SB2022030733
and 1 more
#VU29032 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7676		 CWE-79 Low
No
No
 - 16.06.2020 SB2020061604
SB2021072628
SB2021072629
and 19 more
#VU28556 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-13401		 CWE-451 Medium
Available
No
 - 03.06.2020 SB2020060335
SB2020060336
SB2020062305
and 7 more
#VU29673 - Improper Certificate Validation
CVE-2020-7919		 CWE-295 Medium
No
No
 - 16.03.2020 SB2020031611
SB2020020725
SB2020020726
and 15 more
#VU20426 - Resource exhaustion
CVE-2019-10747		 CWE-400 Medium
No
No
 3.2.1.4 28.08.2019 SB2019082316
SB2022082512
SB2020110621
and 5 more


Showing elements 41 - 60 out of 68