Known vulnerabilities in IBM Engineering Requirements Quality Assistant

Vendor: IBM Corporation
Software: IBM Engineering Requirements Quality Assistant
Software CPE: cpe:2.3:a:ibm_corporation:ibm_engineering_requirements_quality_assistant:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 30
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Engineering Requirements Quality Assistant IBM Engineering Requirements Quality Assistant is affected by 30 known vulnerabilities: 4 high, 16 medium, 10 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76906 - Out-of-bounds read
CVE-2023-2597		 CWE-125 High
No
No
 - 05.06.2023 SB2023060525
SB2023060705
SB2023060930
and 86 more
#VU75264 - Improper input validation
CVE-2023-21939		 CWE-20 Medium
Available
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75265 - Improper input validation
CVE-2023-21938		 CWE-20 Low
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968		 CWE-20 Low
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937		 CWE-20 Low
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75261 - Improper input validation
CVE-2023-21967		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU75262 - Improper input validation
CVE-2023-21954		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU70123 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-37601		 CWE-94 High
No
No
 - 12.12.2022 SB2022121220
SB2023010419
SB2023011403
and 20 more
#VU70122 - Incorrect Regular Expression
CVE-2022-37599		 CWE-185 Medium
No
No
 - 12.12.2022 SB2022121221
SB2023010424
SB2023020920
and 19 more
#VU69675 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24999		 CWE-94 Medium
Available
No
 - 29.11.2022 SB2022112910
SB2022112911
SB2022112943
and 49 more
#VU66400 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-33987		 CWE-601 Medium
No
No
 - 11.08.2022 SB2022081124
SB2022081525
SB2022090835
and 22 more
#VU64865 - Improper Control of Dynamically-Managed Code Resources
CVE-2022-25878		 CWE-913 High
No
No
 - 04.07.2022 SB2022070404
SB2022120629
SB2023052313
and 2 more
#VU63702 - Allocation of Resources Without Limits or Throttling
CVE-2020-15168		 CWE-770 Medium
No
No
 - 26.05.2022 SB2020091032
SB2022052615
SB2022060618
and 12 more
#VU62361 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43138		 CWE-94 Medium
No
No
 - 15.04.2022 SB2022041532
SB2022041533
SB2022062103
and 33 more
#VU61471 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0235		 CWE-200 Low
No
No
 - 20.03.2022 SB2022032001
SB2022032002
SB2022032009
and 35 more
#VU61257 - UNIX Symbolic Link (Symlink) Following
CVE-2021-39135		 CWE-61 Low
No
No
 - 11.03.2022 SB2021083138
SB2022031104
SB2021120224
and 6 more
#VU61253 - Improper Certificate Validation
CVE-2021-22939		 CWE-295 Medium
No
No
 - 11.03.2022 SB2021081614
SB2022031104
SB2022060618
and 25 more
#VU59233 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-22959		 CWE-444 Medium
No
No
 - 05.01.2022 SB2022010523
SB2022010524
SB2022011841
and 43 more
#VU38700 - Improper input validation
CVE-2017-1000048		 CWE-20 Medium
No
No
 - 17.07.2017 SB2017071720
SB2023052313
SB2023092025
and 4 more


Showing elements 1 - 20 out of 30