Known vulnerabilities in IBM Data Risk Manager - page 3

Software CPE: cpe:2.3:a:ibm_corporation:ibm_data_risk_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 120
Public exploits: 18
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Data Risk Manager IBM Data Risk Manager is affected by 120 known vulnerabilities: 13 high, 68 medium, 39 low Critical High Medium Low

Vulnerabilities (120)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80780 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34442
CWE-200 Low
No
No
2.0.6.18 14.09.2023 SB2023091426
#VU79519 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-32697
CWE-94 High
No
No
2.0.6.18 15.08.2023 SB2023090805
SB2023090807
SB2023091411
and 7 more
#VU77807 - Out-of-bounds read
CVE-2021-31239
CWE-125 Low
No
No
2.0.6.18 29.06.2023 SB2023062933
SB2023081011
SB20230820151
and 6 more
#VU77362 - Resource exhaustion
CVE-2023-34455
CWE-400 Medium
No
No
2.0.6.18 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 48 more
#VU77361 - Integer overflow
CVE-2023-34454
CWE-190 Medium
No
No
2.0.6.18 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 39 more
#VU77359 - Integer overflow
CVE-2023-34453
CWE-190 Medium
No
No
2.0.6.18 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 40 more
#VU76906 - Out-of-bounds read
CVE-2023-2597
CWE-125 High
No
No
2.0.6.18 05.06.2023 SB2023060525
SB2023060705
SB2023060930
and 86 more
#VU76417 - Allocation of Resources Without Limits or Throttling
CVE-2023-28709
CWE-770 Medium
No
No
2.0.6.18 22.05.2023 SB2023052235
SB2023053003
SB2023053052
and 35 more
#VU75264 - Improper input validation
CVE-2023-21939
CWE-20 Medium
Available
No
2.0.6.18 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75265 - Improper input validation
CVE-2023-21938
CWE-20 Low
No
No
2.0.6.18 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968
CWE-20 Low
No
No
2.0.6.18 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937
CWE-20 Low
No
No
2.0.6.18 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU75217 - Improper input validation
CVE-2023-26049
CWE-20 Low
No
No
2.0.6.18 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Available
No
2.0.6.18 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU71586 - Out-of-bounds write
CVE-2022-40152
CWE-787 Medium
No
No
2.0.6.16 26.01.2023 SB2023012669
SB2023012670
SB2023013124
and 52 more
#VU71314 - Improper input validation
CVE-2022-40153
CWE-20 Medium
No
No
2.0.6.16 18.01.2023 SB2023011841
SB2023012670
SB2023021321
and 21 more
#VU71109 - Out-of-bounds write
CVE-2022-45693
CWE-787 Medium
No
No
2.0.6.16 11.01.2023 SB2023011159
SB2023011160
SB2023013112
and 45 more
#VU71108 - Out-of-bounds write
CVE-2022-45685
CWE-787 Medium
No
No
2.0.6.16 11.01.2023 SB2023011159
SB2023011160
SB2023030328
and 29 more
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143
CWE-94 Medium
No
No
2.0.6.16 03.01.2023 SB2023010329
SB2023012516
SB2023012606
and 34 more
#VU69283 - Out-of-bounds write
CVE-2022-40151
CWE-787 Medium
No
No
2.0.6.16 14.11.2022 SB2022111420
SB2022122822
SB2023012670
and 32 more


Showing elements 41 - 60 out of 120