Known vulnerabilities in IBM Common Licensing - page 6

Vendor: IBM Corporation
Software: IBM Common Licensing
Software CPE: cpe:2.3:a:ibm_corporation:ibm_common_licensing:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 119
Public exploits: 11
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Common Licensing IBM Common Licensing is affected by 119 known vulnerabilities: 2 critical, 12 high, 68 medium, 37 low Critical High Medium Low

Vulnerabilities (119)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86716 - Observable Response Discrepancy
CVE-2023-50306		 CWE-204 Low
No
No
 - 22.02.2024 SB2024022218
SB2024030424
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 - 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 9.0.0.6 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 9.0.0.6 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU64957 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-33980		 CWE-94 High
Available
No
 - 06.07.2022 SB2022070645
SB2022072604
SB2022081517
and 31 more
#VU63976 - Improper input validation
CVE-2021-22060		 CWE-20 Low
No
No
 - 03.06.2022 SB2022060324
SB2022060716
SB2022082436
and 9 more
#VU63345 - Improper Authorization
CVE-2022-22978		 CWE-285 High
Available
No
 9.0.0.6 17.05.2022 SB2022051717
SB2022052009
SB2022052010
and 20 more
#VU63085 - Improper input validation
CVE-2022-22971		 CWE-20 Medium
Available
No
 - 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 52 more
#VU63084 - Improper input validation
CVE-2022-22970		 CWE-20 Medium
No
No
 - 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 23 more
#VU62314 - Security Features
CVE-2022-22968		 CWE-254 Medium
Available
No
 - 14.04.2022 SB2022041405
SB2022042903
SB2022060324
and 31 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU61760 - Incorrect Regular Expression
CVE-2022-22950		 CWE-185 Medium
No
No
 - 31.03.2022 SB2022033110
SB2022060308
SB2022060324
and 25 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965		 CWE-94 Critical
Available
Exploited
 - 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813		 CWE-611 Medium
No
No
 9.0.0.6 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more
#VU61720 - Improper input validation
CVE-2021-22096		 CWE-20 Medium
No
No
 - 29.03.2022 SB2021102810
SB2022032929
SB2022032930
and 15 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 - 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Available
Exploited
 - 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU57496 - Improper input validation
CVE-2021-35603		 CWE-20 Low
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 112 more


Showing elements 101 - 120 out of 119