Known vulnerabilities in IBM Cloud Foundry Migration Runtime

Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_foundry_migration_runtime:*:*:*:*:*:*:*:*
Total vulnerabilities: 11
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Foundry Migration Runtime IBM Cloud Foundry Migration Runtime is affected by 11 known vulnerabilities: 1 high, 7 medium, 3 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55034 - Uncontrolled Memory Allocation
CVE-2021-33910
CWE-789 Low
Available
No
4.1.2 20.07.2021 SB2021072031
SB2021072032
SB2021072206
and 31 more
#VU53609 - Improper input validation
CVE-2021-25217
CWE-20 Medium
No
No
4.1.2 27.05.2021 SB2021052708
SB2021052808
SB2021052902
and 38 more
#VU52000 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-28965
CWE-611 Medium
No
No
4.1.2 08.04.2021 SB2021040816
SB2021041365
SB2021042119
and 24 more
#VU47333 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-25613
CWE-444 Medium
Available
No
4.1.2 05.10.2020 SB2020100509
SB2020100703
SB2020111806
and 21 more
#VU49352 - Files or Directories Accessible to External Parties
CVE-2019-3881
CWE-552 Low
No
No
4.1.2 04.09.2020 SB2020090421
SB2021010812
SB2021060717
and 4 more
#VU31886 - Exposure of sensitive information to an unauthorized actor
CVE-2020-10933
CWE-200 Low
No
No
4.1.2 26.07.2020 SB2020050439
SB2020050208
SB2020040188
and 11 more
#VU32971 - Improper input validation
CVE-2020-10663
CWE-20 Medium
No
No
4.1.2 28.04.2020 SB2020042868
SB2020050208
SB2020081273
and 24 more
#VU23009 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-16255
CWE-94 High
No
No
4.1.2 27.11.2019 SB2019100211
SB2019112701
SB2019121714
and 14 more
#VU23008 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-16254
CWE-113 Medium
No
No
4.1.2 27.11.2019 SB2019100211
SB2019112701
SB2019121714
and 14 more
#VU23007 - Improper input validation
CVE-2019-16201
CWE-20 Medium
No
No
4.1.2 27.11.2019 SB2019100211
SB2019112701
SB2019121714
and 14 more
#VU23006 - Improper input validation
CVE-2019-15845
CWE-20 Medium
No
No
4.1.2 26.11.2019 SB2019100211
SB2019112701
SB2019121714
and 15 more