Known vulnerabilities in IBM Integration Bus - page 5

Vendor: IBM Corporation
Software: IBM Integration Bus
Software CPE: cpe:2.3:a:ibm_corporation:ibm_integration_bus:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 140
Public exploits: 19
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Integration Bus IBM Integration Bus is affected by 140 known vulnerabilities: 1 critical, 17 high, 93 medium, 29 low Critical High Medium Low

Vulnerabilities (140)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77169 - Cryptographic Issues
CVE-2009-4269		 CWE-310 Low
No
No
 - 12.06.2023 SB2023061227
SB2023092106
#VU77166 - Improper Access Control
CVE-2010-2232		 CWE-284 Medium
No
No
 - 12.06.2023 SB2023061227
#VU75608 - Information Exposure Through Log Files
CVE-2022-42436		 CWE-532 Low
No
No
 10.0.0.26, 10.1 01.05.2023 SB2023050120
SB2023050121
SB2023050122
and 1 more
#VU75603 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-0842		 CWE-1321 Medium
No
No
 - 01.05.2023 SB2023050113
SB2023050917
SB2023052413
and 12 more
#VU75590 - Improper input validation
CVE-2022-43919		 CWE-20 Medium
No
No
 10.0.0.26, 10.1 28.04.2023 SB2023042847
SB2023042852
SB2023051921
and 2 more
#VU75217 - Improper input validation
CVE-2023-26049		 CWE-20 Low
No
No
 10.1.0.2 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU72146 - Improper input validation
CVE-2012-5784		 CWE-20 Medium
No
No
 - 13.02.2023 SB2023021403
SB2023061227
SB2024022640
and 3 more
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 - 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 10.0.0.26, 10.1 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU69675 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24999		 CWE-94 Medium
Available
No
 - 29.11.2022 SB2022112910
SB2022112911
SB2022112943
and 49 more
#VU65831 - Improper input validation
CVE-2022-2047		 CWE-20 Low
No
No
 10.1.0.2 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more
#VU62608 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-29599		 CWE-78 High
No
No
 - 26.04.2022 SB2022042627
SB2022042724
SB2022050234
and 29 more
#VU53973 - Improper input validation
CVE-2021-28169		 CWE-20 Medium
No
No
 - 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU51876 - Resource exhaustion
CVE-2021-28165		 CWE-400 Medium
No
No
 - 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683		 CWE-749 Medium
No
No
 - 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Available
No
 - 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU22565 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-0205		 CWE-835 Medium
No
No
 - 06.11.2019 SB2019102916
SB2020031305
SB2021071503
and 12 more
#VU16954 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1320		 CWE-200 Low
No
No
 - 13.01.2019 SB2019011106
SB2019080913
SB2022041520
and 4 more
#VU14296 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8032		 CWE-79 Low
No
No
 - 08.08.2018 SB2018080909
SB2018101810
SB2023021403
and 5 more
#VU41375 - Improper input validation
CVE-2014-3596		 CWE-20 Medium
No
No
 - 27.08.2014 SB2014082703
SB2014091802
SB2023021403
and 5 more


Showing elements 81 - 100 out of 140