Known vulnerabilities in IBM Edge Application Manager - page 8

Vendor: IBM Corporation
Software: IBM Edge Application Manager
Software CPE: cpe:2.3:a:ibm_corporation:ibm_edge_application_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 203
Public exploits: 17
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Edge Application Manager IBM Edge Application Manager is affected by 203 known vulnerabilities: 1 critical, 35 high, 120 medium, 47 low Critical High Medium Low

Vulnerabilities (203)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66400 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-33987		 CWE-601 Medium
No
No
 - 11.08.2022 SB2022081124
SB2022081525
SB2022090835
and 22 more
#VU66070 - Resource exhaustion
CVE-2022-30633		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66069 - Resource exhaustion
CVE-2022-28131		 CWE-400 Medium
No
No
 - 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU65693 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-33194		 CWE-835 Medium
No
No
 - 22.07.2022 SB2021052653
SB2022072210
SB2022081842
and 16 more
#VU64416 - Improper preservation of permissions
CVE-2021-41091		 CWE-281 Low
Available
No
 - 15.06.2022 SB2021100419
SB2022061528
SB2021101264
and 13 more
#VU64415 - Improper preservation of permissions
CVE-2021-41089		 CWE-281 Low
No
No
 - 15.06.2022 SB2021100419
SB2022061528
SB2021101264
and 14 more
#VU64007 - Resource exhaustion
CVE-2022-31030		 CWE-400 Medium
No
No
 - 07.06.2022 SB2022060702
SB2022061206
SB2022061326
and 23 more
#VU63698 - Incorrect Regular Expression
CVE-2021-33502		 CWE-185 Medium
No
No
 - 26.05.2022 SB2021052416
SB2022052615
SB2022060618
and 17 more
#VU61255 - Incorrect Regular Expression
CVE-2021-23362		 CWE-185 Medium
No
No
 - 11.03.2022 SB2021032315
SB2022031104
SB2022060315
and 28 more
#VU60972 - Permissions, Privileges, and Access Controls
CVE-2022-23648		 CWE-264 Medium
Available
No
 - 03.03.2022 SB2022030305
SB2022030722
SB2022030725
and 30 more
#VU59237 - Permissions, Privileges, and Access Controls
CVE-2021-43816		 CWE-264 Low
No
No
 - 06.01.2022 SB2022010606
SB2023051629
SB2024030421
and 10 more
#VU58824 - Improper input validation
CVE-2021-44716		 CWE-20 Medium
No
No
 - 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU54910 - Uncontrolled Recursion
CVE-2021-31525		 CWE-674 Medium
No
No
 - 15.07.2021 SB2021071514
SB2021052725
SB2021071515
and 39 more
#VU51486 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-27918		 CWE-835 Medium
No
No
 - 15.03.2021 SB2021031515
SB2021071515
SB2021071516
and 18 more
#VU21707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10735		 CWE-79 Low
No
No
 - 10.10.2019 SB2019010911
SB2019101009
SB2020093090
and 21 more
#VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8331		 CWE-79 Low
No
No
 - 14.02.2019 SB2019021412
SB2019031501
SB2019101009
and 28 more
#VU16956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20676		 CWE-79 Low
No
No
 - 13.01.2019 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU16542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20677		 CWE-79 Low
No
No
 - 14.12.2018 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14042		 CWE-79 Low
No
No
 - 18.07.2018 SB2018071803
SB2020093090
SB2020110508
and 22 more
#VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14040		 CWE-79 Low
No
No
 - 17.07.2018 SB2018071803
SB2019031501
SB2020093090
and 24 more


Showing elements 141 - 160 out of 203