Known vulnerabilities in IBM Event Endpoint Management

Software CPE: cpe:2.3:a:ibm_corporation:ibm_event_endpoint_management:*:*:*:*:*:*:*:*
Total vulnerabilities: 48
Public exploits: 5
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Event Endpoint Management IBM Event Endpoint Management is affected by 48 known vulnerabilities: 7 high, 31 medium, 10 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151445 - Uncontrolled Recursion
CVE-2026-9358
CWE-674 Low
No
No
11.8.2 19.09.2026 SB20260919188
SB20260919187
SB2026092109
and 2 more
#VU132377 - Always-Incorrect Control Flow Implementation
CVE-2026-41988
CWE-670 Low
No
No
11.8.2 27.05.2026 SB2026052767
SB2026052768
SB20260528259
and 12 more
#VU132376 - Out-of-bounds write
CVE-2026-41907
CWE-787 High
No
No
11.8.2 27.05.2026 SB2026052766
SB2026052768
SB2026060118
and 12 more
#VU122967 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-56200
CWE-79 Low
No
No
11.7.0 16.02.2026 SB20260216157
SB20260216158
SB2026021915
and 2 more
#VU121666 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-64718
CWE-1321 Medium
No
No
11.8.2 19.01.2026 SB2026011995
SB2026011999
SB20260119100
and 30 more
#VU119401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-64756
CWE-78 Medium
No
No
11.7.1 09.12.2025 SB2025120922
SB2025120932
SB20251210178
and 18 more
#VU118206 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-57319
CWE-1321 Medium
No
No
11.7.0 07.11.2025 SB2025110782
SB2025121603
SB2026010606
and 4 more
#VU117611 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-11966
CWE-79 Low
No
No
11.7.2 23.10.2025 SB2025102374
SB2025121725
SB2026010706
and 3 more
#VU117583 - Files or Directories Accessible to External Parties
CVE-2025-11965
CWE-552 Medium
No
No
11.7.2 23.10.2025 SB2025102374
SB2025121725
SB2026012038
and 2 more
#VU116142 - Uncontrolled Recursion
CVE-2025-53864
CWE-674 Medium
No
No
11.7.0 26.09.2025 SB2025092630
SB2025092631
SB2025100301
and 27 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056
CWE-444 Medium
No
No
11.7.0 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 39 more
#VU113811 - Exposure of resource to wrong sphere
CVE-2025-49574
CWE-668 Low
No
No
11.7.0 12.08.2025 SB2025081226
SB2025100107
SB2025100114
and 10 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924
CWE-674 Medium
No
No
11.7.0 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 182 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889
CWE-1333 Low
No
No
11.7.0 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 34 more
#VU107521 - Improper input validation
CVE-2025-30698
CWE-20 Medium
No
No
11.6.3 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 93 more
#VU102463 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-55565
CWE-835 Medium
No
No
11.4.2 08.01.2025 SB2025010849
SB2025010851
SB2025010853
and 45 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538
CWE-185 Medium
No
No
11.4.2 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU98644 - Improper input validation
CVE-2024-21235
CWE-20 Medium
No
No
11.6.3 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98648 - Improper input validation
CVE-2024-21217
CWE-20 Low
No
No
11.7.0 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU85240 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-11831
CWE-79 Medium
No
No
11.6.0 09.01.2024 SB2024010997
SB2025021411
SB2025021412
and 17 more


Showing elements 1 - 20 out of 48