Known vulnerabilities in IBM Cloud Transformation Advisor

Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_transformation_advisor:*:*:*:*:*:*:*:*
Total vulnerabilities: 625
Public exploits: 37
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Transformation Advisor IBM Cloud Transformation Advisor is affected by 625 known vulnerabilities: 1 critical, 68 high, 366 medium, 190 low Critical High Medium Low

Vulnerabilities (625)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138926 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-12143
CWE-93 High
No
No
5.0.0 21.07.2026 SB20260721116
SB2026072414
SB2026072616
and 12 more
#VU135090 - Improper Privilege Management
CVE-2026-3621
CWE-269 Medium
No
No
5.0.0 24.06.2026 SB2026062429
SB2026062430
SB20260626104
and 13 more
#VU134925 - Improper input validation
CVE-2026-40181
CWE-20 Low
No
No
5.0.0 19.06.2026 SB2026061978
SB2026070733
SB2026071327
and 2 more
#VU132377 - Always-Incorrect Control Flow Implementation
CVE-2026-41988
CWE-670 Low
No
No
5.0.0 27.05.2026 SB2026052767
SB2026052768
SB20260528259
and 9 more
#VU132376 - Out-of-bounds write
CVE-2026-41907
CWE-787 High
No
No
5.0.0 27.05.2026 SB2026052766
SB2026052768
SB2026060118
and 8 more
#VU132031 - Security Features
CVE-2026-5516
CWE-254 Low
No
No
5.0.0 21.05.2026 SB2026052115
SB20260626104
SB2026071327
and 11 more
#VU131746 - NULL Pointer Dereference
CVE-2026-8723
CWE-476 Medium
No
No
5.0.0 18.05.2026 SB2026051892
SB2026061048
SB2026062221
and 6 more
#VU131249 - Use of Uninitialized Resource
CVE-2026-45736
CWE-908 Low
No
No
5.0.0 12.05.2026 SB20260512113
SB2026061995
SB2026062221
and 11 more
#VU126758 - Improper input validation
CVE-2026-22016
CWE-20 Medium
No
No
5.0.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 78 more
#VU126761 - Improper input validation
CVE-2026-22021
CWE-20 Medium
No
No
5.0.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 80 more
#VU126762 - Improper input validation
CVE-2026-22013
CWE-20 Medium
No
No
5.0.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 77 more
#VU126764 - Improper input validation
CVE-2026-22018
CWE-20 Low
No
No
5.0.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 78 more
#VU126765 - Improper input validation
CVE-2026-22007
CWE-20 Low
No
No
5.0.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 78 more
#VU126766 - Improper input validation
CVE-2026-34268
CWE-20 Low
No
No
5.0.0 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 78 more
#VU126561 - Permissive List of Allowed Inputs
CVE-2026-41240
CWE-183 Low
No
No
4.6.2 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 9 more
#VU126560 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41239
CWE-79 Medium
No
No
4.6.2 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 5 more
#VU126559 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-41238
CWE-1321 Medium
No
No
4.6.2 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 4 more
#VU115571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-36000
CWE-79 Low
No
No
4.4.0 16.09.2025 SB20250916311
SB20250916316
SB2025092515
and 25 more
#VU115568 - Allocation of Resources Without Limits or Throttling
CVE-2025-36047
CWE-770 Medium
No
No
4.4.0 16.09.2025 SB20250916312
SB20250916316
SB20250916321
and 29 more
#VU113074 - Stack-based buffer overflow
CVE-2025-36097
CWE-121 High
No
No
4.4.0 18.07.2025 SB20250718100
SB2025072128
SB2025072307
and 43 more


Showing elements 1 - 20 out of 625