Known vulnerabilities in IBM Concert Software - page 8

Vendor: IBM Corporation
Software: IBM Concert Software
Software CPE: cpe:2.3:a:ibm_corporation:ibm_concert_software:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 179
Public exploits: 16
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Concert Software IBM Concert Software is affected by 179 known vulnerabilities: 1 critical, 27 high, 102 medium, 49 low Critical High Medium Low

Vulnerabilities (179)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99588 - Exposure of sensitive information to an unauthorized actor
CVE-2024-49354		 CWE-200 Medium
No
No
 1.0.2.1 01.11.2024 SB2024110128
#VU89685 - Improper Validation of Integrity Check Value
CVE-2024-3727		 CWE-354 Medium
No
No
 1.0.1 21.05.2024 SB2024052112
SB2024052116
SB2024052117
and 68 more
#VU89149 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-34069		 CWE-94 Medium
No
No
 1.0.3 06.05.2024 SB2024050606
SB2024050723
SB2024050930
and 54 more
#VU88098 - Use of Uninitialized Variable
CVE-2024-26147		 CWE-457 Low
No
No
 1.0.1 03.04.2024 SB2024040355
SB2024040357
SB2024040358
and 13 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 1.0.3 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87658 - Incorrect Resource Transfer Between Spheres
CVE-2024-29018		 CWE-669 Medium
No
No
 1.0.1 20.03.2024 SB2024032036
SB2024041284
SB2024042466
and 24 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 1.0.1 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289		 CWE-200 Low
No
No
 1.0.3 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 1.0.3 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86795 - Improper input validation
CVE-2023-29483		 CWE-20 Medium
No
No
 1.0.3 26.02.2024 SB2024022638
SB2024040115
SB2024042448
and 37 more
#VU86548 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-25620		 CWE-22 Medium
No
No
 1.0.1 15.02.2024 SB2024021537
SB2024040354
SB2024040360
and 9 more
#VU86049 - Insufficient Verification of Data Authenticity
CVE-2024-24557		 CWE-345 Medium
No
No
 1.0.1 02.02.2024 SB2024020242
SB2024032237
SB2024032712
and 18 more
#VU86039 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-23650		 CWE-754 Medium
No
No
 1.0.1 02.02.2024 SB2024020229
SB2024022911
SB20240611189
and 11 more
#VU86038 - Incorrect Authorization
CVE-2024-23653		 CWE-863 High
Available
No
 1.0.1 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 23 more
#VU86037 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-23652		 CWE-22 Medium
No
No
 1.0.1 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 20 more
#VU86035 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-23651		 CWE-362 Medium
No
No
 1.0.1 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 20 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 1.0.1 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 344 more
#VU82548 - Inefficient Algorithmic Complexity
CVE-2023-46136		 CWE-407 Medium
No
No
 1.0.3 30.10.2023 SB2023103003
SB2023103183
SB2023112907
and 73 more
#VU64011 - Improper input validation
CVE-2018-25031		 CWE-20 Low
Available
No
 1.0.3 07.06.2022 SB2022060710
SB2022061603
SB2022061612
and 23 more
#VU30727 - Cross-Site Request Forgery (CSRF)
CVE-2019-17495		 CWE-352 Medium
No
No
 1.0.3 11.10.2019 SB2019101115
SB2020102846
SB2020102933
and 12 more


Showing elements 141 - 160 out of 179