Known vulnerabilities in IBM HTTP Server - page 2

Software CPE: cpe:2.3:a:ibm_corporation:ibm_http_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 58
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM HTTP Server IBM HTTP Server is affected by 58 known vulnerabilities: 1 critical, 10 high, 36 medium, 11 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94504 - Exposure of sensitive information to an unauthorized actor
CVE-2024-40725
CWE-200 Medium
Available
No
8.5.5.27, 9.0.5.21 17.07.2024 SB20240717136
SB2024071854
SB2024071896
and 22 more
#VU93729 - Exposure of sensitive information to an unauthorized actor
CVE-2024-39884
CWE-200 Medium
No
No
8.5.5.27, 9.0.5.21 03.07.2024 SB2024070342
SB2024070401
SB2024070890
and 21 more
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573
CWE-918 Medium
No
No
8.5.5.27, 9.0.5.21 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93544 - Improper input validation
CVE-2024-38477
CWE-20 Medium
No
No
8.5.5.27, 9.0.5.21 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU93543 - Server-Side Request Forgery (SSRF)
CVE-2024-38476
CWE-918 High
No
No
8.5.5.27, 9.0.5.21 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 61 more
#VU93542 - Improper input validation
CVE-2024-38475
CWE-20 Critical
Available
No
8.5.5.27, 9.0.5.21 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93541 - Improper input validation
CVE-2024-38474
CWE-20 Medium
No
No
8.5.5.27, 9.0.5.21 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 57 more
#VU93540 - Improper input validation
CVE-2024-38473
CWE-20 Medium
Available
No
8.5.5.27, 9.0.5.21 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU93539 - Server-Side Request Forgery (SSRF)
CVE-2024-38472
CWE-918 Medium
Available
No
8.5.5.27, 9.0.5.21 01.07.2024 SB2024070155
SB20240702144
SB2024081362
and 11 more
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795
CWE-113 Medium
No
No
8.5.5.26, 9.0.5.20 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 38 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709
CWE-113 Medium
No
No
8.5.5.26, 9.0.5.20 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 62 more
#VU86230 - Resource exhaustion
CVE-2023-52425
CWE-400 Medium
No
No
8.5.5.26, 9.0.5.19 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 118 more
#VU82248 - Out-of-bounds read
CVE-2023-31122
CWE-125 Medium
No
No
9.0.5.18 19.10.2023 SB2023101942
SB2023101960
SB2023102101
and 42 more
#VU76487 - Inadequate Encryption Strength
CVE-2023-32342
CWE-326 Medium
No
No
- 24.05.2023 SB2023052446
SB2023060817
SB2023061605
and 25 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690
CWE-113 Medium
Available
No
8.5.5.24, 9.0.5.16 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU72613 - Improper input validation
CVE-2023-26281
CWE-20 Medium
No
No
- 28.02.2023 SB2023022812
SB2023030209
SB2023033122
#VU71753 - Stack-based buffer overflow
CVE-2022-28331
CWE-121 High
No
No
8.5.5.24, 9.0.5.15 02.02.2023 SB2023020208
SB2023022708
SB2023033122
and 5 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436
CWE-113 Medium
No
No
8.5.5.24, 9.0.5.15 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760
CWE-444 Medium
No
No
8.5.5.24, 9.0.5.15 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71241 - Memory corruption
CVE-2006-20001
CWE-119 Medium
No
No
8.5.5.24, 9.0.5.15 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 28 more


Showing elements 21 - 40 out of 58