Known vulnerabilities in IBM Data Risk Manager - page 4

Vendor: IBM Corporation
Software: IBM Data Risk Manager
Software CPE: cpe:2.3:a:ibm_corporation:ibm_data_risk_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 120
Public exploits: 18
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Data Risk Manager IBM Data Risk Manager is affected by 120 known vulnerabilities: 13 high, 68 medium, 39 low Critical High Medium Low

Vulnerabilities (120)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77622 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34981		 CWE-200 Medium
No
No
 2.0.6.18 22.06.2023 SB2023062241
SB2023070714
SB2023071901
and 24 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 2.0.6.18 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU76042 - Security Features
CVE-2023-2455		 CWE-254 Low
No
No
 2.0.6.19 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 61 more
#VU76041 - Permissions, Privileges, and Access Controls
CVE-2023-2454		 CWE-264 Medium
No
No
 2.0.6.19 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 55 more
#VU75562 - Improper input validation
CVE-2023-20861		 CWE-20 Medium
No
No
 2.0.6.17 27.04.2023 SB2023042742
SB2023042746
SB2023042832
and 61 more
#VU75561 - Improper input validation
CVE-2023-20860		 CWE-20 Medium
No
No
 2.0.6.17 27.04.2023 SB2023042742
SB2023042746
SB2023050518
and 34 more
#VU75508 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30441		 CWE-200 Medium
No
No
 2.0.6.17 26.04.2023 SB2023042618
SB2023042749
SB2023050107
and 41 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 2.0.6.17 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU75408 - Security Features
CVE-2023-20862		 CWE-254 Medium
No
No
 2.0.6.17 21.04.2023 SB2023042130
SB2023042132
SB2023053121
and 20 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 2.0.6.18 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75261 - Improper input validation
CVE-2023-21967		 CWE-20 Medium
No
No
 2.0.6.18 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU75262 - Improper input validation
CVE-2023-21954		 CWE-20 Medium
No
No
 2.0.6.18 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 2.0.6.17 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708		 CWE-614 Low
No
No
 2.0.6.17 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 2.0.6.17 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843		 CWE-20 Low
No
No
 2.0.6.17 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU70442 - Stack-based buffer overflow
CVE-2022-4378		 CWE-121 Low
No
No
 2.0.6.17 20.12.2022 SB2022122008
SB2022122123
SB2022122124
and 124 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 2.0.6.17 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU68442 - Improper input validation
CVE-2022-21619		 CWE-20 Low
No
No
 2.0.6.15 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 140 more
#VU62399 - Improper input validation
CVE-2022-21426		 CWE-20 Medium
No
No
 2.0.6.17 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more


Showing elements 61 - 80 out of 120