Known vulnerabilities in IBM Event Endpoint Management

Vendor: IBM Corporation
Software: IBM Event Endpoint Management
Software CPE: cpe:2.3:a:ibm_corporation:ibm_event_endpoint_management:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 43
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Event Endpoint Management IBM Event Endpoint Management is affected by 43 known vulnerabilities: 6 high, 29 medium, 8 low Critical High Medium Low

Vulnerabilities (43)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122967 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-56200		 CWE-79 Low
No
No
 11.7.0 16.02.2026 SB20260216157
SB20260216158
SB2026021915
and 2 more
#VU119401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-64756		 CWE-78 Medium
No
No
 11.7.1 09.12.2025 SB2025120922
SB2025120932
SB20251210178
and 18 more
#VU118206 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-57319		 CWE-1321 Medium
No
No
 11.7.0 07.11.2025 SB2025110782
SB2025121603
SB2026010606
and 4 more
#VU117611 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-11966		 CWE-79 Low
No
No
 11.7.2 23.10.2025 SB2025102374
SB2025121725
SB2026010706
and 3 more
#VU117583 - Files or Directories Accessible to External Parties
CVE-2025-11965		 CWE-552 Medium
No
No
 11.7.2 23.10.2025 SB2025102374
SB2025121725
SB2026012038
and 2 more
#VU116142 - Uncontrolled Recursion
CVE-2025-53864		 CWE-674 Medium
No
No
 11.7.0 26.09.2025 SB2025092630
SB2025092631
SB2025100301
and 27 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 11.7.0 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 38 more
#VU113811 - Exposure of resource to wrong sphere
CVE-2025-49574		 CWE-668 Low
No
No
 11.7.0 12.08.2025 SB2025081226
SB2025100107
SB2025100114
and 9 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 11.7.0 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 177 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889		 CWE-1333 Low
No
No
 11.7.0 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 33 more
#VU107521 - Improper input validation
CVE-2025-30698		 CWE-20 Medium
No
No
 11.6.3 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 93 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 11.4.2 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103769 - Resource exhaustion
CVE-2025-25193		 CWE-400 Low
No
No
 11.4.2 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 56 more
#VU102463 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-55565		 CWE-835 Medium
No
No
 11.4.2 08.01.2025 SB2025010849
SB2025010851
SB2025010853
and 45 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538		 CWE-185 Medium
No
No
 11.4.2 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 11.4.2 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU98644 - Improper input validation
CVE-2024-21235		 CWE-20 Medium
No
No
 11.6.3 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98648 - Improper input validation
CVE-2024-21217		 CWE-20 Low
No
No
 11.7.0 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU97744 - Command injection
CVE-2024-47177		 CWE-77 High
Available
No
 11.3.2 27.09.2024 SB2024092717
SB2024092725
SB2024092726
and 11 more
#VU85240 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-11831		 CWE-79 Medium
No
No
 11.6.0 09.01.2024 SB2024010997
SB2025021411
SB2025021412
and 17 more


Showing elements 1 - 20 out of 43