Known vulnerabilities in IBM Integration Bus - page 3

Vendor: IBM Corporation
Software: IBM Integration Bus
Software CPE: cpe:2.3:a:ibm_corporation:ibm_integration_bus:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 140
Public exploits: 19
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Integration Bus IBM Integration Bus is affected by 140 known vulnerabilities: 1 critical, 17 high, 93 medium, 29 low Critical High Medium Low

Vulnerabilities (140)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80404 - Improper input validation
CVE-2023-28513		 CWE-20 Medium
No
No
 - 04.09.2023 SB2023090455
SB2023092119
SB2023092225
and 1 more
#VU80019 - Server-Side Request Forgery (SSRF)
CVE-2022-44730		 CWE-918 Medium
No
No
 - 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 15 more
#VU80018 - Server-Side Request Forgery (SSRF)
CVE-2022-44729		 CWE-918 Medium
No
No
 - 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 25 more
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609		 CWE-502 High
No
No
 - 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU77362 - Resource exhaustion
CVE-2023-34455		 CWE-400 Medium
No
No
 - 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 48 more
#VU77361 - Integer overflow
CVE-2023-34454		 CWE-190 Medium
No
No
 - 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 39 more
#VU77359 - Integer overflow
CVE-2023-34453		 CWE-190 Medium
No
No
 - 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 40 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 - 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU75593 - Improper input validation
CVE-2023-26285		 CWE-20 Medium
No
No
 - 28.04.2023 SB2023042850
SB2023042853
SB2023071403
and 2 more
#VU75592 - Information Exposure Through Log Files
CVE-2023-28950		 CWE-532 Low
No
No
 - 28.04.2023 SB2023042849
SB2023060211
SB2023071403
and 1 more
#VU75476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22665		 CWE-79 Low
No
No
 - 25.04.2023 SB2023042529
SB2023070408
SB2023100531
and 1 more
#VU75264 - Improper input validation
CVE-2023-21939		 CWE-20 Medium
Available
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75262 - Improper input validation
CVE-2023-21954		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843		 CWE-20 Low
No
No
 - 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU62831 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-28890		 CWE-611 Medium
No
No
 - 05.05.2022 SB2022050531
SB2023070408
SB2023100469
and 4 more
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813		 CWE-611 Medium
No
No
 - 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more
#VU56669 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-39239		 CWE-611 High
No
No
 - 16.09.2021 SB2021091620
SB2023041243
SB2023070408
and 5 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 - 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU12886 - Uncontrolled Memory Allocation
CVE-2018-10237		 CWE-789 Low
No
No
 - 21.05.2018 SB2018052310
SB2018083005
SB2018092411
and 43 more


Showing elements 41 - 60 out of 140