Known vulnerabilities in IBM Concert Software - page 8

Vendor: IBM Corporation
Software: IBM Concert Software
Software CPE: cpe:2.3:a:ibm_corporation:ibm_concert_software:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 179
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Concert Software IBM Concert Software is affected by 179 known vulnerabilities: 1 critical, 27 high, 102 medium, 49 low Critical High Medium Low

Vulnerabilities (179)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99588 - Exposure of sensitive information to an unauthorized actor
CVE-2024-49354		 CWE-200 Medium
No
No
 1.0.2.1 01.11.2024 SB2024110128
#VU89149 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-34069		 CWE-94 Medium
No
No
 1.0.3 06.05.2024 SB2024050606
SB2024050723
SB2024050930
and 54 more
#VU88098 - Use of Uninitialized Variable
CVE-2024-26147		 CWE-457 Low
No
No
 1.0.1 03.04.2024 SB2024040355
SB2024040357
SB2024040358
and 13 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 1.0.3 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87658 - Incorrect Resource Transfer Between Spheres
CVE-2024-29018		 CWE-669 Medium
No
No
 1.0.1 20.03.2024 SB2024032036
SB2024041284
SB2024042466
and 24 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289		 CWE-200 Low
No
No
 1.0.3 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 1.0.3 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86795 - Improper input validation
CVE-2023-29483		 CWE-20 Medium
No
No
 1.0.3 26.02.2024 SB2024022638
SB2024040115
SB2024042448
and 37 more
#VU86548 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-25620		 CWE-22 Medium
No
No
 1.0.1 15.02.2024 SB2024021537
SB2024040354
SB2024040360
and 9 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 1.0.1 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 1.0.1 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU83254 - Improper input validation
CVE-2023-45284		 CWE-20 Low
No
No
 1.0.1 17.11.2023 SB2023111740
SB2023111741
SB2023111742
and 18 more
#VU82548 - Inefficient Algorithmic Complexity
CVE-2023-46136		 CWE-407 Medium
No
No
 1.0.3 30.10.2023 SB2023103003
SB2023103183
SB2023112907
and 73 more
#VU72886 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-41721		 CWE-444 Medium
No
No
 1.0.1 06.03.2023 SB2023030655
SB2023030656
SB2023030657
and 39 more
#VU64699 - Incorrect Authorization
CVE-2022-24778		 CWE-863 Medium
No
No
 1.0.1 27.06.2022 SB2022062828
SB2022120642
SB2022121324
and 10 more
#VU64011 - Improper input validation
CVE-2018-25031		 CWE-20 Low
Available
No
 1.0.3 07.06.2022 SB2022060710
SB2022061603
SB2022061612
and 23 more
#VU63090 - Permissions, Privileges, and Access Controls
CVE-2022-29162		 CWE-264 Medium
No
No
 1.0.1 12.05.2022 SB2022051205
SB2022062435
SB2022071158
and 32 more
#VU61600 - Permissions, Privileges, and Access Controls
CVE-2022-24769		 CWE-264 Medium
No
No
 1.0.1 24.03.2022 SB2022032414
SB2022032503
SB2022042141
and 29 more
#VU48373 - Exposure of sensitive information to an unauthorized actor
CVE-2020-12912		 CWE-200 Low
No
No
 1.0.1 11.11.2020 SB2020111118
SB2023120115
SB2023121950
and 4 more
#VU30727 - Cross-Site Request Forgery (CSRF)
CVE-2019-17495		 CWE-352 Medium
No
No
 1.0.3 11.10.2019 SB2019101115
SB2020102846
SB2020102933
and 12 more


Showing elements 141 - 160 out of 179