Known vulnerabilities in IBM Integrated Analytics System - page 21

Software CPE: cpe:2.3:a:ibm_corporation:ibm_integrated_analytics_system:*:*:*:*:*:*:*:*
Total vulnerabilities: 420
Public exploits: 16
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Integrated Analytics System IBM Integrated Analytics System is affected by 420 known vulnerabilities: 1 critical, 19 high, 63 medium, 337 low Critical High Medium Low

Vulnerabilities (420)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78454 - Untrusted Search Path
CVE-2023-38408
CWE-426 Medium
Available
No
7.9.23.08.SP21 20.07.2023 SB2023072068
SB2023072073
SB2023072074
and 73 more
#VU77305 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-28473
CWE-444 High
No
No
1.0.28.0 14.06.2023 SB2023061435
SB2023071811
SB2021030542
and 3 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681
CWE-200 Medium
Available
No
1.0.28.0 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU71398 - Insufficient Verification of Data Authenticity
CVE-2022-23491
CWE-345 High
No
No
1.0.28.0 20.01.2023 SB2023012034
SB2023012035
SB2023012036
and 51 more
#VU67550 - Missing release of memory after effective lifetime
CVE-2022-38178
CWE-401 Medium
No
No
7.9.22.10.SP14 21.09.2022 SB2022092131
SB2022092140
SB2022092147
and 48 more
#VU67549 - Missing release of memory after effective lifetime
CVE-2022-38177
CWE-401 Medium
No
No
7.9.22.10.SP14 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 52 more
#VU67545 - Resource Management Errors
CVE-2022-2795
CWE-399 Medium
No
No
7.9.23.02.SP17 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 71 more
#VU63912 - Security Features
CVE-2022-31799
CWE-254 Medium
No
No
1.0.28.0 01.06.2022 SB2022060117
SB2022061201
SB2022072635
and 13 more
#VU61671 - Memory corruption
CVE-2018-25032
CWE-119 Medium
No
No
7.9.22.10.SP14 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU61662 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-24302
CWE-362 Low
No
No
1.0.28.0 28.03.2022 SB2022032832
SB2022032837
SB2022033014
and 20 more
#VU60186 - Out-of-bounds write
CVE-2021-44142
CWE-787 High
Available
No
- 31.01.2022 SB2022013111
SB2022013118
SB2022013119
and 36 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305
CWE-89 Medium
No
No
- 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105
CWE-835 Medium
Available
No
1.0.26.3 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046
CWE-94 High
Available
Exploited
1.0.26.3 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU58333 - Improper Privilege Management
CVE-2021-41617
CWE-269 Low
No
No
- 23.11.2021 SB2021092601
SB2021112330
SB2021120119
and 38 more
#VU57101 - Out-of-bounds write
CVE-2021-37576
CWE-787 Medium
No
No
- 06.10.2021 SB2021100617
SB2021100618
SB2021101001
and 42 more
#VU52736 - Reachable Assertion
CVE-2021-25215
CWE-617 Medium
No
No
- 29.04.2021 SB2021042903
SB2021042904
SB2021042928
and 42 more
#VU52734 - Reachable Assertion
CVE-2021-25214
CWE-617 Low
No
No
- 29.04.2021 SB2021042903
SB2021042904
SB2021042928
and 25 more
#VU50745 - Improper input validation
CVE-2021-23840
CWE-20 Medium
No
No
- 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU50740 - NULL Pointer Dereference
CVE-2021-23841
CWE-476 Medium
No
No
- 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 66 more


Showing elements 401 - 420 out of 420