Known vulnerabilities in IBM Cloud Automation Manager - page 3

Vendor: IBM Corporation
Software: IBM Cloud Automation Manager
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_automation_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 49
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Automation Manager IBM Cloud Automation Manager is affected by 49 known vulnerabilities: 5 high, 34 medium, 10 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77187 - Missing Encryption of Sensitive Data
CVE-2019-4616		 CWE-311 Low
No
No
 3.2.1.1, 3.2.1.2 13.06.2023 SB2020110639
#VU77186 - Session Fixation
CVE-2019-4617		 CWE-384 Low
No
No
 3.2.1.1 13.06.2023 SB2020110638
#VU76124 - Out-of-bounds read
CVE-2020-8244		 CWE-125 Medium
No
No
 4.2.0.1 iFix 1 15.05.2023 SB2023051504
SB2020110620
SB2023051630
and 6 more
#VU47225 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7720		 CWE-94 Medium
No
No
 - 30.09.2020 -
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-16845		 CWE-835 Medium
No
No
 - 14.08.2020 -
#VU28556 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-13401		 CWE-451 Medium
Available
No
 - 03.06.2020 -
#VU29673 - Improper Certificate Validation
CVE-2020-7919		 CWE-295 Medium
No
No
 - 16.03.2020 -
#VU20501 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-15664		 CWE-22 Low
No
No
 Not fixed 02.09.2019 -
#VU17474 - Permissions, Privileges, and Access Controls
CVE-2019-5736		 CWE-264 Medium
Available
No
 - 12.02.2019 -


Showing elements 41 - 60 out of 49