Known vulnerabilities in IBM Data Risk Manager

Vendor: IBM Corporation
Software: IBM Data Risk Manager
Software CPE: cpe:2.3:a:ibm_corporation:ibm_data_risk_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 120
Public exploits: 18
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Data Risk Manager IBM Data Risk Manager is affected by 120 known vulnerabilities: 13 high, 68 medium, 39 low Critical High Medium Low

Vulnerabilities (120)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 2.0.6.20 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU83219 - Deserialization of Untrusted Data
CVE-2023-39410		 CWE-502 Medium
No
No
 2.0.6.20 16.11.2023 SB2023111614
SB2023112014
SB2023112410
and 43 more
#VU82943 - Permissions, Privileges, and Access Controls
CVE-2023-5870		 CWE-264 Low
No
No
 2.0.6.20 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 54 more
#VU82941 - Exposure of sensitive information to an unauthorized actor
CVE-2023-5868		 CWE-200 Low
No
No
 2.0.6.20 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 53 more
#VU82122 - Improper input validation
CVE-2023-35116		 CWE-20 Low
No
No
 2.0.6.20 17.10.2023 SB2023101771
SB20231018117
SB2023101925
and 45 more
#VU81803 - Exposed Dangerous Method or Function
CVE-2023-42794		 CWE-749 Medium
No
No
 2.0.6.20 10.10.2023 SB2023101084
SB2023101286
SB2023111528
and 22 more
#VU81800 - Resource Management Errors
CVE-2023-42795		 CWE-399 Medium
No
No
 2.0.6.20 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648		 CWE-444 Medium
No
No
 2.0.6.20 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 2.0.6.20 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 648 more
#VU80886 - Incorrect Permission Assignment for Critical Resource
CVE-2023-34042		 CWE-732 Low
No
No
 2.0.6.20 19.09.2023 SB2023091922
SB2023112217
SB2023120414
and 6 more
#VU80880 - Security Features
CVE-2023-34034		 CWE-254 High
No
No
 2.0.6.20 19.09.2023 SB2023091914
SB2023100926
SB20231017104
and 22 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 2.0.6.20 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU80586 - Use After Free
CVE-2023-4208		 CWE-416 Low
No
No
 2.0.6.20 11.09.2023 SB2023091128
SB2023091130
SB2023092702
and 52 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Available
No
 2.0.6.20 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU79454 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39417		 CWE-89 Medium
No
No
 2.0.6.20 11.08.2023 SB2023081132
SB2023081715
SB2023081716
and 60 more
#VU78454 - Untrusted Search Path
CVE-2023-38408		 CWE-426 Medium
Available
No
 2.0.6.20 20.07.2023 SB2023072068
SB2023072073
SB2023072074
and 73 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 2.0.6.20 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 2.0.6.20 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU78326 - Out-of-bounds write
CVE-2023-35001		 CWE-787 Low
Available
No
 2.0.6.20 17.07.2023 SB2023071735
SB2023071736
SB2023072077
and 129 more
#VU75807 - Use After Free
CVE-2023-32233		 CWE-416 Low
Available
No
 2.0.6.20 09.05.2023 SB2023050923
SB2023051402
SB2023053054
and 100 more


Showing elements 1 - 20 out of 120