Known vulnerabilities in IBM i - page 11

Vendor: IBM Corporation
Software: IBM i
Software CPE: cpe:2.3:o:ibm_corporation:ibm_i:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 269
Public exploits: 20
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM i IBM i is affected by 269 known vulnerabilities: 2 critical, 19 high, 164 medium, 84 low Critical High Medium Low

Vulnerabilities (269)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75713 - Improper input validation
CVE-2023-23470		 CWE-20 Low
No
No
 - 04.05.2023 SB2023050406
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 203 more
#VU72075 - Insecure Temporary File
CVE-2023-0482		 CWE-377 Low
No
No
 - 08.02.2023 SB2023020877
SB2023033003
SB2023033004
and 36 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 - 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71531 - Reachable Assertion
CVE-2022-3924		 CWE-617 Medium
No
No
 - 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 19 more
#VU71530 - Improper input validation
CVE-2022-3736		 CWE-20 Medium
No
No
 - 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 18 more
#VU71529 - Resource exhaustion
CVE-2022-3094		 CWE-400 Medium
No
No
 - 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 47 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436		 CWE-113 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71241 - Memory corruption
CVE-2006-20001		 CWE-119 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 28 more
#VU70797 - Exposure of sensitive information to an unauthorized actor
CVE-2022-45787		 CWE-200 Low
No
No
 - 09.01.2023 SB2023010909
SB2023020878
SB2023031107
and 34 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 - 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU69670 - Improper input validation
CVE-2022-3509		 CWE-20 Medium
No
No
 - 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 - 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165		 CWE-444 Medium
No
No
 - 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU68844 - Type confusion
CVE-2022-3676		 CWE-843 Medium
No
No
 - 31.10.2022 SB2022103129
SB2022111110
SB2022111724
and 60 more
#VU68437 - Improper input validation
CVE-2022-21628		 CWE-20 Medium
No
No
 - 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 138 more
#VU68438 - Improper input validation
CVE-2022-21626		 CWE-20 Medium
No
No
 - 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68441 - Improper input validation
CVE-2022-21624		 CWE-20 Low
No
No
 - 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU68442 - Improper input validation
CVE-2022-21619		 CWE-20 Low
No
No
 - 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 140 more
#VU67948 - Resource exhaustion
CVE-2022-37734		 CWE-400 Medium
No
No
 - 05.10.2022 SB2022100553
SB2022100555
SB2022100650
and 19 more


Showing elements 201 - 220 out of 269