Known vulnerabilities in IBM License Metric Tool - page 3

Vendor: IBM Corporation
Software: IBM License Metric Tool
Software CPE: cpe:2.3:a:ibm_corporation:ibm_license_metric_tool:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 132
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM License Metric Tool IBM License Metric Tool is affected by 132 known vulnerabilities: 8 high, 78 medium, 46 low Critical High Medium Low

Vulnerabilities (132)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97226 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-27267		 CWE-362 Medium
No
No
 9.2.37 12.09.2024 SB2024091291
SB2024091292
SB2024091618
and 57 more
#VU96970 - Resource exhaustion
CVE-2024-43398		 CWE-400 Medium
No
No
 9.2.37 10.09.2024 SB2024091006
SB2024091007
SB2024091008
and 28 more
#VU96058 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50314		 CWE-200 Low
No
No
 9.2.37 15.08.2024 SB2024081566
SB2024091324
SB2024091814
and 44 more
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 9.2.37 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU95149 - Improper input validation
CVE-2024-41123		 CWE-20 Medium
No
No
 9.2.37 01.08.2024 SB2024080145
SB2024091009
SB2024091607
and 24 more
#VU95148 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2024-41946		 CWE-776 Medium
No
No
 9.2.37 01.08.2024 SB2024080145
SB2024082374
SB2024091607
and 22 more
#VU94733 - Resource exhaustion
CVE-2024-28762		 CWE-400 Low
No
No
 - 25.07.2024 SB2024072514
SB2024072902
SB2024073008
and 10 more
#VU94728 - Resource exhaustion
CVE-2023-29267		 CWE-400 Medium
No
No
 - 25.07.2024 SB2024072511
SB2024072902
SB2024073008
and 10 more
#VU94727 - Allocation of Resources Without Limits or Throttling
CVE-2024-31881		 CWE-770 Low
No
No
 - 25.07.2024 SB2024072510
SB2024072902
SB2024073008
and 10 more
#VU94694 - Resource exhaustion
CVE-2024-31880		 CWE-400 Low
No
No
 - 24.07.2024 SB2024072411
SB2024072902
SB2024073008
and 10 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 9.2.37 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU94363 - Improper input validation
CVE-2024-39908		 CWE-20 Medium
No
No
 9.2.37 16.07.2024 SB2024071616
SB2024083015
SB2024091009
and 22 more
#VU94361 - Improper input validation
CVE-2024-35176		 CWE-20 Medium
Available
No
 9.2.36 16.07.2024 SB2024071615
SB2024071914
SB2024072112
and 19 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172		 CWE-835 Medium
No
No
 9.2.36 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89219 - Observable discrepancy
CVE-2024-30171		 CWE-203 Medium
No
No
 9.2.36 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 9.2.36 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 9.2.36 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354		 CWE-611 High
No
No
 9.2.36 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 9.2.36 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU86988 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50312		 CWE-327 Low
No
No
 9.2.36 04.03.2024 SB2024030425
SB2024031819
SB2024032049
and 49 more


Showing elements 41 - 60 out of 132