Known vulnerabilities in IBM Common Licensing - page 3

Vendor: IBM Corporation
Software: IBM Common Licensing
Software CPE: cpe:2.3:a:ibm_corporation:ibm_common_licensing:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 133
Public exploits: 11
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Common Licensing IBM Common Licensing is affected by 133 known vulnerabilities: 2 critical, 14 high, 78 medium, 39 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 9.0.0.2 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU105881 - Security Features
CVE-2025-22228		 CWE-254 Low
No
No
 9.0.0.2 19.03.2025 SB2025031966
SB2025040327
SB2025061733
and 24 more
#VU101344 - Integer overflow
CVE-2024-10917		 CWE-190 Low
No
No
 - 09.12.2024 SB2024120927
SB2024120928
SB2024120929
and 66 more
#VU100679 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38829		 CWE-200 Medium
No
No
 9.0.0.2 20.11.2024 SB2024112004
SB2025071423
SB2025090314
#VU100676 - Improper Authorization
CVE-2024-38827		 CWE-285 Medium
No
No
 9.0.0.2 19.11.2024 SB2024111987
SB2025012185
SB2025012188
and 30 more
#VU98644 - Improper input validation
CVE-2024-21235		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98645 - Improper input validation
CVE-2024-21210		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015215
SB2024101668
SB2024101672
and 122 more
#VU98647 - Improper input validation
CVE-2024-21208		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98648 - Improper input validation
CVE-2024-21217		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU97226 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-27267		 CWE-362 Medium
No
No
 - 12.09.2024 SB2024091291
SB2024091292
SB2024091618
and 57 more
#VU96058 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50314		 CWE-200 Low
No
No
 - 15.08.2024 SB2024081566
SB2024091324
SB2024091814
and 44 more
#VU94556 - Improper input validation
CVE-2024-21145		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU94558 - Improper input validation
CVE-2024-21144		 CWE-20 Low
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718192
and 114 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU67948 - Resource exhaustion
CVE-2022-37734		 CWE-400 Medium
No
No
 9.0.0.1 05.10.2022 SB2022100553
SB2022100555
SB2022100650
and 19 more
#VU64197 - Improper Authentication
CVE-2022-22475		 CWE-287 Low
No
No
 9.0.0.1 13.06.2022 SB2022061307
SB2022061310
SB2022062218
and 26 more
#VU61581 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-22310		 CWE-327 Low
No
No
 9.0.0.1 24.03.2022 SB2022032402
SB2022032403
SB2022060710
and 3 more
#VU59970 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2021-39031		 CWE-90 Medium
No
No
 9.0.0.1 25.01.2022 SB2022012506
SB2022032317
SB2022041207
and 12 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 9.0.0.1 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU26209 - Cleartext Transmission of Sensitive Information
CVE-2019-0231		 CWE-319 Low
No
No
 9.0.0.2 19.03.2020 SB2019100129
SB2020031901
SB2022080805
and 3 more


Showing elements 41 - 60 out of 133