Known vulnerabilities in IBM i - page 6

Vendor: IBM Corporation
Software: IBM i
Software CPE: cpe:2.3:o:ibm_corporation:ibm_i:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 253
Public exploits: 20
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM i IBM i is affected by 253 known vulnerabilities: 2 critical, 18 high, 155 medium, 78 low Critical High Medium Low

Vulnerabilities (253)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97696 - Uncontrolled Search Path Element
CVE-2024-38330		 CWE-427 Low
No
No
 - 25.09.2024 SB2024092523
#VU95167 - Execution with Unnecessary Privileges
CVE-2024-31890		 CWE-250 Low
No
No
 - 02.08.2024 SB2024080229
#VU95118 - Deserialization of Untrusted Data
CVE-2024-31879		 CWE-502 Medium
No
No
 - 31.07.2024 SB20240731210
#VU94752 - Observable Response Discrepancy
CVE-2024-31870		 CWE-204 Low
No
No
 - 26.07.2024 SB2024072617
#VU94751 - Permissions, Privileges, and Access Controls
CVE-2024-27275		 CWE-264 Low
No
No
 - 26.07.2024 SB2024072615
#VU94713 - Reachable Assertion
CVE-2024-4076		 CWE-617 Medium
No
No
 - 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 36 more
#VU94711 - Resource exhaustion
CVE-2024-1975		 CWE-400 Medium
No
No
 - 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 72 more
#VU94710 - Resource Management Errors
CVE-2024-1737		 CWE-399 Medium
No
No
 - 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 73 more
#VU94709 - Resource exhaustion
CVE-2024-0760		 CWE-400 Medium
No
No
 - 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 13 more
#VU94700 - Observable discrepancy
CVE-2024-31878		 CWE-203 Medium
No
No
 - 24.07.2024 SB2024072413
#VU93542 - Improper input validation
CVE-2024-38475		 CWE-20 Critical
Available
No
 - 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93541 - Improper input validation
CVE-2024-38474		 CWE-20 Medium
No
No
 - 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 57 more
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387		 CWE-362 High
Available
No
 - 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU91984 - Permissions, Privileges, and Access Controls
CVE-2024-3933		 CWE-264 Low
No
No
 - 12.06.2024 SB2024061213
SB20240613101
SB20240613102
and 29 more
#VU89343 - Resource exhaustion
CVE-2023-38264		 CWE-400 Medium
No
No
 - 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU89077 - Uncontrolled Search Path Element
CVE-2024-25050		 CWE-427 Low
No
No
 - 01.05.2024 SB2024050114
SB2024071910
#VU88665 - Improper input validation
CVE-2024-21085		 CWE-20 Low
No
No
 - 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795		 CWE-113 Medium
No
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 38 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709		 CWE-113 Medium
No
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 62 more
#VU8887 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12288		 CWE-79 Low
No
No
 - 18.10.2017 SB2017101910
SB20240827144


Showing elements 101 - 120 out of 253