Known vulnerabilities in IBM Concert Software - page 7

Vendor: IBM Corporation
Software: IBM Concert Software
Software CPE: cpe:2.3:a:ibm_corporation:ibm_concert_software:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 179
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Concert Software IBM Concert Software is affected by 179 known vulnerabilities: 1 critical, 27 high, 102 medium, 49 low Critical High Medium Low

Vulnerabilities (179)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101077 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37070		 CWE-200 Low
No
No
 1.0.3 02.12.2024 SB2024120213
#VU101076 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-52360		 CWE-89 Medium
No
No
 1.0.3 02.12.2024 SB2024120213
#VU101075 - Incorrect User Management
CVE-2024-52359		 CWE-286 Low
No
No
 1.0.3 02.12.2024 SB2024120213
#VU99567 - Resource exhaustion
CVE-2024-49767		 CWE-400 Medium
No
No
 1.0.5 31.10.2024 SB2024103173
SB2024103176
SB2024110601
and 30 more
#VU99566 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49766		 CWE-22 Medium
No
No
 1.0.5 31.10.2024 SB2024103173
SB2024121313
SB2024121851
and 16 more
#VU98820 - Resource exhaustion
CVE-2024-47874		 CWE-400 Medium
No
No
 1.0.5 18.10.2024 SB2024101827
SB2024101835
SB2024101837
and 8 more
#VU98141 - Improper input validation
CVE-2024-9341		 CWE-20 Low
No
No
 1.0.5 08.10.2024 SB2024100842
SB2024100843
SB2024100848
and 44 more
#VU96899 - Integer overflow
CVE-2024-45492		 CWE-190 High
No
No
 1.0.3 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 108 more
#VU96898 - Integer overflow
CVE-2024-45491		 CWE-190 High
No
No
 1.0.3 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 106 more
#VU96897 - Buffer Underwrite ('Buffer Underflow')
CVE-2024-45490		 CWE-124 High
No
No
 1.0.3 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 113 more
#VU95571 - Command injection
CVE-2024-6923		 CWE-77 Medium
No
No
 1.0.3 08.08.2024 SB2024080861
SB2024080862
SB2024080863
and 144 more
#VU95441 - Missing release of memory after effective lifetime
CVE-2024-26462		 CWE-401 Medium
No
No
 1.0.5 07.08.2024 SB2024040939
SB2024080724
SB2024080725
and 18 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 1.0.5 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596		 CWE-327 Medium
Available
No
 1.0.5 10.07.2024 SB2024071018
SB2024071019
SB2024071020
and 114 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 1.0.3 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 1.0.3 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU88226 - Missing release of memory after effective lifetime
CVE-2024-26461		 CWE-401 Medium
No
No
 1.0.5 09.04.2024 SB2024040939
SB2024040943
SB20240611102
and 46 more
#VU88225 - Missing release of memory after effective lifetime
CVE-2024-26458		 CWE-401 Medium
No
No
 1.0.5 09.04.2024 SB2024040938
SB2024040943
SB20240611102
and 47 more
#VU87329 - Resource exhaustion
CVE-2024-28176		 CWE-400 Medium
No
No
 1.0.3 11.03.2024 SB2024031123
SB2024031446
SB2024031447
and 37 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785		 CWE-79 Low
No
No
 1.0.3 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more


Showing elements 121 - 140 out of 179