Known vulnerabilities in IBM i - page 7

Vendor: IBM Corporation
Software: IBM i
Software CPE: cpe:2.3:o:ibm_corporation:ibm_i:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 269
Public exploits: 20
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM i IBM i is affected by 269 known vulnerabilities: 2 critical, 19 high, 164 medium, 84 low Critical High Medium Low

Vulnerabilities (269)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97696 - Uncontrolled Search Path Element
CVE-2024-38330		 CWE-427 Low
No
No
 - 25.09.2024 SB2024092523
#VU95167 - Execution with Unnecessary Privileges
CVE-2024-31890		 CWE-250 Low
No
No
 - 02.08.2024 SB2024080229
#VU95118 - Deserialization of Untrusted Data
CVE-2024-31879		 CWE-502 Medium
No
No
 - 31.07.2024 SB20240731210
#VU94752 - Observable Response Discrepancy
CVE-2024-31870		 CWE-204 Low
No
No
 - 26.07.2024 SB2024072617
#VU94751 - Permissions, Privileges, and Access Controls
CVE-2024-27275		 CWE-264 Low
No
No
 - 26.07.2024 SB2024072615
#VU94711 - Resource exhaustion
CVE-2024-1975		 CWE-400 Medium
No
No
 - 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 72 more
#VU94709 - Resource exhaustion
CVE-2024-0760		 CWE-400 Medium
No
No
 - 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 13 more
#VU94700 - Observable discrepancy
CVE-2024-31878		 CWE-203 Medium
No
No
 - 24.07.2024 SB2024072413
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387		 CWE-362 High
Available
No
 - 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU91984 - Permissions, Privileges, and Access Controls
CVE-2024-3933		 CWE-264 Low
No
No
 - 12.06.2024 SB2024061213
SB20240613101
SB20240613102
and 29 more
#VU89763 - Permissions, Privileges, and Access Controls
CVE-2024-27264		 CWE-264 Low
No
No
 - 23.05.2024 SB2024052330
SB20240611173
#VU89343 - Resource exhaustion
CVE-2023-38264		 CWE-400 Medium
No
No
 - 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU89077 - Uncontrolled Search Path Element
CVE-2024-25050		 CWE-427 Low
No
No
 - 01.05.2024 SB2024050114
SB2024071910
#VU88665 - Improper input validation
CVE-2024-21085		 CWE-20 Low
No
No
 - 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88153 - Resource exhaustion
CVE-2024-27316		 CWE-400 Medium
Available
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795		 CWE-113 Medium
No
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 39 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709		 CWE-113 Medium
No
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 65 more
#VU87831 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27270		 CWE-79 Medium
No
No
 - 26.03.2024 SB2024032654
SB2024050220
SB2024050920
and 31 more
#VU86988 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50312		 CWE-327 Low
No
No
 - 04.03.2024 SB2024030425
SB2024031819
SB2024032049
and 49 more
#VU8887 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12288		 CWE-79 Low
No
No
 - 18.10.2017 SB2017101910
SB20240827144


Showing elements 121 - 140 out of 269