Known vulnerabilities in IBM ILOG CPLEX Optimization Studio (COS)

Known vulnerabilities in IBM ILOG CPLEX Optimization Studio (COS)

Vendor: IBM Corporation

Software: IBM ILOG CPLEX Optimization Studio (COS)

Software CPE: cpe:2.3:a:ibm_corporation:ibm_ilog_cplex_optimization_studio_cos:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 14

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU83267 - Improper input validation CVE-2023-5676	CWE-20	Low	No	No	-	20.11.2023	SB2023112010 SB2023112011 SB2023112726 and 101 more
#VU78413 - Improper input validation CVE-2023-22045	CWE-20	Low	No	No	-	19.07.2023	SB2023071985 SB2023071986 SB2023071987 and 155 more
#VU78414 - Improper input validation CVE-2023-22049	CWE-20	Low	No	No	-	19.07.2023	SB2023071985 SB2023071986 SB2023071987 and 164 more
#VU75265 - Improper input validation CVE-2023-21938	CWE-20	Low	No	No	-	18.04.2023	SB20230418166 SB20230418167 SB2023041942 and 181 more
#VU75266 - Improper input validation CVE-2023-21968	CWE-20	Low	No	No	-	18.04.2023	SB20230418166 SB20230418167 SB2023041942 and 179 more
#VU75267 - Improper input validation CVE-2023-21937	CWE-20	Low	No	No	-	18.04.2023	SB20230418166 SB20230418167 SB2023041942 and 184 more
#VU68844 - Type confusion CVE-2022-3676	CWE-843	Medium	No	No	-	31.10.2022	SB2022103129 SB2022111110 SB2022111724 and 60 more
#VU68749 - Cleartext Transmission of Sensitive Information CVE-2022-42916	CWE-319	Medium	No	No	12.8, 12.9, 12.10, 20.1, 20.1.0.1, 22.1	26.10.2022	SB2022102624 SB2022102662 SB2022102703 and 27 more
#VU68748 - Double Free CVE-2022-42915	CWE-415	Medium	No	No	12.8, 12.9, 12.10, 20.1, 20.1.0.1, 22.1	26.10.2022	SB2022102624 SB2022102662 SB2022102705 and 26 more
#VU68746 - Expected Behavior Violation CVE-2022-32221	CWE-440	Medium	No	No	12.8, 12.9, 12.10, 20.1, 20.1.0.1, 22.1	26.10.2022	SB2022102624 SB2022102643 SB2022102644 and 58 more
#VU67029 - Error Handling CVE-2021-41041	CWE-388	Low	No	No	-	06.09.2022	SB2022090642 SB2022090643 SB2022093005 and 25 more
#VU60084 - Missing initialization of resource CVE-2021-28167	CWE-909	Medium	No	No	-	27.01.2022	SB2021042158 SB2022102806 SB2022112426 and 15 more
#VU59722 - Improper input validation CVE-2022-21360	CWE-20	Medium	No	No	-	18.01.2022	SB2022011840 SB2022011841 SB2022011931 and 93 more
#VU59723 - Improper input validation CVE-2022-21365	CWE-20	Medium	No	No	-	18.01.2022	SB2022011840 SB2022011841 SB2022011931 and 94 more