Known vulnerabilities in IBM Integration Bus - page 2

Vendor: IBM Corporation
Software: IBM Integration Bus
Software CPE: cpe:2.3:a:ibm_corporation:ibm_integration_bus:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 140
Public exploits: 19
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Integration Bus IBM Integration Bus is affected by 140 known vulnerabilities: 1 critical, 17 high, 93 medium, 29 low Critical High Medium Low

Vulnerabilities (140)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84414 - Improper Neutralization of Special Elements used in an Expression Language Statement
CVE-2023-32200		 CWE-917 Medium
No
No
 - 14.12.2023 SB2023121413
SB2025050927
#VU83545 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-46337		 CWE-90 High
No
No
 - 28.11.2023 SB2023112861
SB2024011806
SB2024020107
and 34 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 - 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU83385 - Resource exhaustion
CVE-2023-5632		 CWE-400 Medium
No
No
 10.1.0.2 21.11.2023 SB2023112176
SB2023112218
SB2023102806
and 2 more
#VU83267 - Improper input validation
CVE-2023-5676		 CWE-20 Low
No
No
 10.1.0.2 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU83006 - Resource exhaustion
CVE-2023-45176		 CWE-400 Medium
No
No
 - 13.11.2023 SB2023111309
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642		 CWE-770 Medium
No
No
 10.1.0.2 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 - 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU81803 - Exposed Dangerous Method or Function
CVE-2023-42794		 CWE-749 Medium
No
No
 - 10.10.2023 SB2023101084
SB2023101286
SB2023111528
and 22 more
#VU81800 - Resource Management Errors
CVE-2023-42795		 CWE-399 Medium
No
No
 - 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648		 CWE-444 Medium
No
No
 - 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81726 - Integer overflow
CVE-2023-36478		 CWE-190 Medium
No
No
 - 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 10.1.0.2 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635		 CWE-681 Medium
No
No
 10.1.0.2 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Available
No
 10.1.0.2 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU79938 - Missing release of memory after effective lifetime
CVE-2023-3592		 CWE-401 Medium
No
No
 10.1.0.2 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 15 more
#VU79937 - Resource exhaustion
CVE-2023-0809		 CWE-400 Medium
No
No
 10.1.0.2 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 12 more
#VU79936 - Missing release of memory after effective lifetime
CVE-2023-28366		 CWE-401 Medium
No
No
 10.1.0.2 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 13 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 10.1.0.2 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more


Showing elements 21 - 40 out of 140