Known vulnerabilities in IBM Data Risk Manager - page 2

Vendor: IBM Corporation
Software: IBM Data Risk Manager
Software CPE: cpe:2.3:a:ibm_corporation:ibm_data_risk_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 120
Public exploits: 18
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Data Risk Manager IBM Data Risk Manager is affected by 120 known vulnerabilities: 13 high, 68 medium, 39 low Critical High Medium Low

Vulnerabilities (120)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85874 - Resource exhaustion
CVE-2023-33202		 CWE-400 Medium
No
No
 2.0.6.20 29.01.2024 SB2024012929
SB2024012930
SB2024013106
and 19 more
#VU83267 - Improper input validation
CVE-2023-5676		 CWE-20 Low
No
No
 2.0.6.20 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU82942 - Integer overflow
CVE-2023-5869		 CWE-190 High
No
No
 2.0.6.20 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 70 more
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642		 CWE-770 Medium
No
No
 2.0.6.20 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU82140 - Improper input validation
CVE-2023-22067		 CWE-20 Medium
No
No
 2.0.6.20 17.10.2023 SB2023101797
SB2023101924
SB2023101990
and 117 more
#VU82141 - Improper input validation
CVE-2023-22081		 CWE-20 Medium
No
No
 2.0.6.20 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU81726 - Integer overflow
CVE-2023-36478		 CWE-190 Medium
No
No
 2.0.6.20 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU79928 - Deserialization of Untrusted Data
CVE-2023-34040		 CWE-502 Medium
Available
No
 2.0.6.20 23.08.2023 SB2023082369
SB2023110816
SB2023121130
and 3 more
#VU79486 - Use After Free
CVE-2023-4128		 CWE-416 Low
No
No
 2.0.6.20 14.08.2023 SB2023081437
SB2023082053
SB20230821195
and 102 more
#VU79285 - Use After Free
CVE-2023-3776		 CWE-416 Low
No
No
 2.0.6.20 09.08.2023 SB2023080930
SB2023080931
SB2023081433
and 136 more
#VU78943 - Out-of-bounds write
CVE-2023-3611		 CWE-787 Low
No
No
 2.0.6.20 04.08.2023 SB2023080414
SB2023080420
SB2023080931
and 95 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 2.0.6.20 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU72123 - Deserialization of Untrusted Data
CVE-2023-25194		 CWE-502 Low
Available
No
 2.0.6.16 11.02.2023 SB2023021101
SB2023030952
SB2023040419
and 40 more
#VU70528 - Security Features
CVE-2022-46908		 CWE-254 Low
No
No
 2.0.6.16 28.12.2022 SB2022122824
SB2022122826
SB2022122827
and 24 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 2.0.6.16 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 2.0.6.16 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU70443 - Exposure of sensitive information to an unauthorized actor
CVE-2022-46363		 CWE-200 Low
No
No
 2.0.6.16 20.12.2022 SB2022122009
SB2023011707
SB2023012719
and 22 more
#VU69912 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-45046		 CWE-90 High
No
No
 2.0.6.16 05.12.2022 SB2022120548
SB2023101705
#VU69545 - Incorrect Default Permissions
CVE-2022-41946		 CWE-276 Low
No
No
 2.0.6.16 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU67811 - Out-of-bounds write
CVE-2022-2964		 CWE-787 Low
No
No
 2.0.6.16 03.10.2022 SB2022100329
SB2022100331
SB2022102079
and 73 more


Showing elements 21 - 40 out of 120