Known vulnerabilities in IBM Edge Application Manager - page 5

Vendor: IBM Corporation
Software: IBM Edge Application Manager
Software CPE: cpe:2.3:a:ibm_corporation:ibm_edge_application_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 203
Public exploits: 17
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Edge Application Manager IBM Edge Application Manager is affected by 203 known vulnerabilities: 1 critical, 35 high, 120 medium, 47 low Critical High Medium Low

Vulnerabilities (203)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80323 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-26136		 CWE-1321 High
No
No
 - 04.09.2023 SB2023090411
SB2023090423
SB2023090816
and 42 more
#VU79799 - Inefficient Regular Expression Complexity
CVE-2023-26115		 CWE-1333 Medium
No
No
 - 21.08.2023 SB2023082199
SB20230821104
SB2023082858
and 21 more
#VU76847 - Missing Authorization
CVE-2021-38698		 CWE-862 Medium
No
No
 - 05.06.2023 SB2023060515
SB2023091924
SB2022081072
#VU76846 - Cryptographic Issues
CVE-2018-19653		 CWE-310 Medium
No
No
 - 05.06.2023 SB2023060515
#VU76841 - Resource exhaustion
CVE-2022-24687		 CWE-400 Low
No
No
 - 05.06.2023 SB2023060515
SB2022081072
#VU76839 - Server-Side Request Forgery (SSRF)
CVE-2022-29153		 CWE-918 Medium
No
No
 - 05.06.2023 SB2023060515
SB2023010241
SB2023091924
and 8 more
#VU76605 - Uncaught Exception
CVE-2023-2251		 CWE-248 Medium
No
No
 - 29.05.2023 SB2023052918
SB2023060126
SB2023062140
and 9 more
#VU74478 - Improper Access Control
CVE-2023-28154		 CWE-284 Medium
No
No
 - 05.04.2023 SB2023040511
SB2023040515
SB2023041244
and 9 more
#VU74193 - Improper preservation of permissions
CVE-2023-28642		 CWE-281 Medium
No
No
 - 30.03.2023 SB2023033025
SB2023040327
SB2023042614
and 29 more
#VU74189 - Improper preservation of permissions
CVE-2023-25809		 CWE-281 Low
No
No
 - 30.03.2023 SB2023033025
SB2023040327
SB2023042614
and 23 more
#VU72320 - Improper Privilege Management
CVE-2023-25173		 CWE-269 Low
No
No
 - 16.02.2023 SB2023021620
SB2023050808
SB2023051069
and 52 more
#VU72319 - Resource exhaustion
CVE-2023-25153		 CWE-400 Medium
No
No
 - 16.02.2023 SB2023021620
SB2023051934
SB2023060110
and 30 more
#VU71253 - Improper input validation
CVE-2022-3510		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011753
SB2023011787
SB2023013027
and 37 more
#VU70039 - Resource exhaustion
CVE-2022-23471		 CWE-400 Medium
No
No
 - 08.12.2022 SB2022120802
SB2022121324
SB2022122112
and 27 more
#VU69670 - Improper input validation
CVE-2022-3509		 CWE-20 Medium
No
No
 - 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 - 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU68387 - Resource Management Errors
CVE-2022-2879		 CWE-399 Medium
No
No
 - 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 78 more
#VU67516 - Command injection
CVE-2021-42740		 CWE-77 High
No
No
 - 20.09.2022 SB2021102139
SB2022092053
SB2022092054
and 9 more
#VU52310 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-25864		 CWE-79 Low
No
No
 - 16.04.2021 SB2021041637
SB2023060515
SB2023091924
and 1 more
#VU24942 - Resource exhaustion
CVE-2020-7219		 CWE-400 Medium
No
No
 - 05.02.2020 SB2020020510
SB2022112521
SB2023060515


Showing elements 81 - 100 out of 203