Known vulnerabilities in IBM FileNet Content Manager

Vendor: IBM Corporation
Software: IBM FileNet Content Manager
Software CPE: cpe:2.3:a:ibm_corporation:ibm_filenet_content_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 61
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM FileNet Content Manager IBM FileNet Content Manager is affected by 61 known vulnerabilities: 1 critical, 8 high, 33 medium, 19 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-35554		 CWE-362 High
No
No
 5.5.12.0 IF008, 5.6.0.0 IF007, 5.7.0.0 IF004 21.05.2026 SB2026052106
SB2026052107
SB2026052541
and 8 more
#VU123883 - Resource exhaustion
CVE-2025-66453		 CWE-400 Low
No
No
 5.5.12.0 IF007, 5.6.0.0 IF006, 5.7.0.0 IF003 11.03.2026 SB2026031137
SB2026031139
SB2026032529
and 4 more
#VU117475 - Improper input validation
CVE-2025-53816		 CWE-20 Medium
No
No
 5.5.12.0 IF007, 5.6.0.0 IF006, 5.7.0.0 IF003 22.10.2025 SB2025102292
SB2026033177
SB2026062245
#VU112929 - Improper input validation
CVE-2025-29482		 CWE-20 Low
No
No
 5.5.12.0 IF007, 5.6.0.0 IF006, 5.7.0.0 IF003 16.07.2025 SB2025071663
SB2026040220
SB2026062245
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 5.5.8.0 IF010, 5.5.12.0 IF006, 5.6.0.0 IF004, 5.7.0.0 IF001 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU105723 - Stack-based buffer overflow
CVE-2024-8176		 CWE-121 High
No
No
 5.5.12.0 IF007, 5.6.0.0 IF006, 5.7.0.0 IF003 14.03.2025 SB2025031426
SB2025031429
SB2025031430
and 105 more
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 5.5.12.0 IF007, 5.6.0.0 IF006, 5.7.0.0 IF003 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU100863 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-11612		 CWE-835 Low
No
No
 5.5.12.0 IF007, 5.6.0.0 IF006, 5.7.0.0 IF003 22.11.2024 SB2024112237
SB20250416120
SB2026033157
and 1 more
#VU100095 - Memory corruption
CVE-2024-47072		 CWE-119 Medium
No
No
 5.5.8.0 IF009, 5.5.12.0 IF004, 5.6.0.0 IF002 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 36 more
#VU99614 - Improper input validation
CVE-2024-50602		 CWE-20 Medium
No
No
 5.5.12.0 IF007, 5.6.0.0 IF006, 5.7.0.0 IF003 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU98630 - Improper input validation
CVE-2024-25269		 CWE-20 Medium
No
No
 5.5.8.0 IF009, 5.5.12.0 IF004, 5.6.0.0 IF002 15.10.2024 SB20241015171
SB2025030313
SB2025121276
and 1 more
#VU98631 - Improper input validation
CVE-2024-36052		 CWE-20 Medium
No
No
 5.5.8.0 IF009, 5.5.12.0 IF004, 5.6.0.0 IF002 15.10.2024 SB20241015171
SB2025030313
SB2025121276
#VU98638 - Improper input validation
CVE-2023-39743		 CWE-20 Medium
No
No
 5.5.8.0 IF009, 5.5.12.0 IF004, 5.6.0.0 IF002 15.10.2024 SB20241015171
SB2025030313
#VU96899 - Integer overflow
CVE-2024-45492		 CWE-190 High
No
No
 5.5.8.0 IF009, 5.5.12.0 IF004, 5.6.0.0 IF002 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 108 more
#VU96731 - Improper Certificate Validation
CVE-2024-39689		 CWE-295 High
No
No
 5.5.8.0 IF008, 5.5.12.0 IF003, 5.6.0.0 IF001 03.09.2024 SB2024090358
SB2024090359
SB2024090440
and 50 more
#VU87841 - Permissions, Privileges, and Access Controls
CVE-2023-47716		 CWE-264 Low
No
No
 5.5.8.0 IF006, 5.5.10.0 IF002, 5.5.11.0 IF001 27.03.2024 SB2024032709
SB2024040215
#VU86230 - Resource exhaustion
CVE-2023-52425		 CWE-400 Medium
No
No
 5.5.8.0 IF009, 5.5.12.0 IF004, 5.6.0.0 IF002 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 120 more
#VU85787 - Server-Side Request Forgery (SSRF)
CVE-2023-51441		 CWE-918 Low
No
No
 5.5.8.0 IF009, 5.5.12.0 IF004, 5.6.0.0 IF002 25.01.2024 SB2024012508
SB2024032516
SB2024111593
and 4 more
#VU82299 - Heap-based Buffer Overflow
CVE-2023-45853		 CWE-122 Medium
No
No
 5.5.8.0 IF009, 5.5.12.0 IF004, 5.6.0.0 IF002 23.10.2023 SB2023102325
SB2023102633
SB2023102634
and 40 more
#VU12328 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-15691		 CWE-611 Low
No
No
 5.5.8.0 IF008, 5.5.12.0 IF003, 5.6.0.0 IF001 02.05.2018 SB2018050201
SB2024112505
SB2019061830
and 1 more


Showing elements 1 - 20 out of 61