Known vulnerabilities in IBM i - page 11

Vendor: IBM Corporation
Software: IBM i
Software CPE: cpe:2.3:o:ibm_corporation:ibm_i:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 253
Public exploits: 20
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM i IBM i is affected by 253 known vulnerabilities: 2 critical, 18 high, 155 medium, 78 low Critical High Medium Low

Vulnerabilities (253)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69672 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34358		 CWE-79 Low
No
No
 - 29.11.2022 SB2022112908
#VU69670 - Improper input validation
CVE-2022-3509		 CWE-20 Medium
No
No
 - 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 - 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165		 CWE-444 Medium
No
No
 - 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU67948 - Resource exhaustion
CVE-2022-37734		 CWE-400 Medium
No
No
 - 05.10.2022 SB2022100553
SB2022100555
SB2022100650
and 19 more
#VU67944 - Improper input validation
CVE-2022-2928		 CWE-20 Low
No
No
 - 05.10.2022 SB2022100544
SB2022100545
SB2022100547
and 28 more
#VU67943 - Missing release of memory after effective lifetime
CVE-2022-2929		 CWE-401 Medium
No
No
 - 05.10.2022 SB2022100544
SB2022100545
SB2022100547
and 26 more
#VU67550 - Missing release of memory after effective lifetime
CVE-2022-38178		 CWE-401 Medium
No
No
 - 21.09.2022 SB2022092131
SB2022092140
SB2022092147
and 48 more
#VU67549 - Missing release of memory after effective lifetime
CVE-2022-38177		 CWE-401 Medium
No
No
 - 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 52 more
#VU67545 - Resource Management Errors
CVE-2022-2795		 CWE-399 Medium
No
No
 - 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 71 more
#VU65486 - Improper input validation
CVE-2022-24839		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU56474 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33193		 CWE-444 Medium
No
No
 - 13.09.2021 SB2021091317
SB2021091707
SB2021092301
and 24 more
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU54852 - Resource exhaustion
CVE-2021-35517		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 33 more
#VU53780 - Permissions, Privileges, and Access Controls
CVE-2019-17567		 CWE-264 Medium
No
No
 - 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 10 more
#VU53778 - NULL Pointer Dereference
CVE-2020-13950		 CWE-476 Medium
No
No
 - 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 15 more
#VU53774 - Improper input validation
CVE-2021-30641		 CWE-20 Medium
No
No
 - 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 20 more
#VU53773 - NULL Pointer Dereference
CVE-2021-31618		 CWE-476 Medium
No
No
 - 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 12 more
#VU53609 - Improper input validation
CVE-2021-25217		 CWE-20 Medium
No
No
 - 27.05.2021 SB2021052708
SB2021052808
SB2021052902
and 38 more
#VU52449 - Improper input validation
CVE-2021-2163		 CWE-20 Medium
No
No
 - 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more


Showing elements 201 - 220 out of 253