Known vulnerabilities in IBM Data Risk Manager - page 6

Vendor: IBM Corporation
Software: IBM Data Risk Manager
Software CPE: cpe:2.3:a:ibm_corporation:ibm_data_risk_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 120
Public exploits: 18
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Data Risk Manager IBM Data Risk Manager is affected by 120 known vulnerabilities: 13 high, 68 medium, 39 low Critical High Medium Low

Vulnerabilities (120)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68866 - Improper Authorization
CVE-2022-31692		 CWE-285 High
No
No
 2.0.6.15 01.11.2022 SB2022110101
SB2022121119
SB2023011162
and 28 more
#VU68865 - Permissions, Privileges, and Access Controls
CVE-2022-31690		 CWE-264 Medium
No
No
 2.0.6.15 01.11.2022 SB2022110101
SB2022121119
SB2023012108
and 9 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252		 CWE-444 Medium
No
No
 2.0.6.15 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889		 CWE-94 High
Available
Exploited
 2.0.6.15 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU67668 - Stack-based buffer overflow
CVE-2022-38750		 CWE-121 Medium
No
No
 2.0.6.15 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU67666 - Stack-based buffer overflow
CVE-2022-38749		 CWE-121 Medium
No
No
 2.0.6.15 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 51 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 2.0.6.15 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752		 CWE-121 Medium
No
No
 2.0.6.15 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more
#VU67663 - Out-of-bounds write
CVE-2022-38751		 CWE-787 Medium
No
No
 2.0.6.15 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU67489 - Resource exhaustion
CVE-2022-34917		 CWE-400 Medium
No
No
 2.0.6.15 20.09.2022 SB2022092020
SB2022100556
SB2022110304
and 21 more
#VU67414 - Improper Validation of Array Index
CVE-2022-35737		 CWE-129 Medium
Available
No
 2.0.6.15 15.09.2022 SB2022091537
SB2022092034
SB2022092682
and 72 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 2.0.6.15 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160		 CWE-79 Low
No
No
 2.0.6.15 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU65496 - Improper input validation
CVE-2022-21541		 CWE-20 Medium
No
No
 2.0.6.15 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 105 more
#VU64957 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-33980		 CWE-94 High
Available
No
 2.0.6.15 06.07.2022 SB2022070645
SB2022072604
SB2022081517
and 31 more
#VU64668 - Use After Free
CVE-2022-32250		 CWE-416 Low
Available
No
 2.0.6.15 24.06.2022 SB2022062427
SB2022062437
SB2022062440
and 57 more
#VU27085 - Weak Password Requirements
CVE-2020-4429		 CWE-521 High
Available
No
 - 22.04.2020 SB2020042205
#VU27084 - Improper Authentication
CVE-2020-4428		 CWE-287 High
Available
Exploited
 - 22.04.2020 SB2020042205
#VU27082 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-4427		 CWE-22 Low
Available
Exploited
 2.0.4 22.04.2020 SB2020042204
#VU27081 - Command injection
CVE-2020-4429		 CWE-77 Medium
Available
No
 2.0.4 22.04.2020 SB2020042204


Showing elements 101 - 120 out of 120