Known vulnerabilities in IBM Observability with Instana

Vendor: IBM Corporation
Software: IBM Observability with Instana
Software CPE: cpe:2.3:a:ibm_corporation:ibm_observability_with_instana:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 448
Public exploits: 35
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Observability with Instana IBM Observability with Instana is affected by 448 known vulnerabilities: 3 critical, 70 high, 287 medium, 88 low Critical High Medium Low

Vulnerabilities (448)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123089 - Out-of-bounds write
CVE-2026-22184		 CWE-787 High
No
No
 1.0.313 19.02.2026 SB2026021955
SB2026030101
SB2026030102
and 2 more
#VU118778 - Out-of-bounds read
CVE-2025-64720		 CWE-125 Medium
No
No
 1.0.313 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 40 more
#VU118777 - Heap-based Buffer Overflow
CVE-2025-65018		 CWE-122 Critical
Available
No
 1.0.313 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 46 more
#VU118176 - Resource exhaustion
CVE-2025-64329		 CWE-400 Low
No
No
 1.0.313 07.11.2025 SB2025110610
SB2025111276
SB2025112826
and 12 more
#VU117436 - Allocation of Resources Without Limits or Throttling
CVE-2025-8916		 CWE-770 Medium
No
No
 1.0.307 21.10.2025 SB2025102223
SB2025102241
SB2025102248
and 35 more
#VU114450 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-57810		 CWE-835 Medium
No
No
 1.0.307 27.08.2025 SB2025082720
SB2025100912
SB2025112543
and 4 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988		 CWE-611 Medium
Available
No
 1.0.307 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 31 more
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 1.0.307 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU113839 - Integer overflow
CVE-2025-4877		 CWE-190 Low
No
No
 1.0.313 12.08.2025 SB2025062451
SB2025081265
SB2025082012
and 5 more
#VU112936 - Improper input validation
CVE-2025-50059		 CWE-20 High
No
No
 1.0.307 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 54 more
#VU112937 - Improper input validation
CVE-2025-30749		 CWE-20 High
No
No
 1.0.307 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106		 CWE-20 High
No
No
 1.0.307 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU111900 - Out-of-bounds read
CVE-2025-5318		 CWE-125 Medium
No
No
 1.0.313 24.06.2025 SB2025062451
SB2025062454
SB20250704157
and 61 more
#VU111225 - Integer overflow
CVE-2025-6021		 CWE-190 High
No
No
 1.0.307 17.06.2025 SB2025061921
SB2025062408
SB2025062747
and 63 more
#VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-47273		 CWE-22 High
No
No
 1.0.307 27.05.2025 SB2025052721
SB2025052734
SB2025052736
and 112 more
#VU105900 - Memory corruption
CVE-2025-25724		 CWE-119 High
No
No
 1.0.307 20.03.2025 SB2025032034
SB2025032045
SB2025032169
and 25 more
#VU98820 - Resource exhaustion
CVE-2024-47874		 CWE-400 Medium
No
No
 1.0.307 18.10.2024 SB2024101827
SB2024101835
SB2024101837
and 8 more
#VU97970 - Stack-based buffer overflow
CVE-2024-31449		 CWE-121 Medium
No
No
 1.0.307 02.10.2024 SB2024100272
SB2024100323
SB2024100324
and 33 more
#VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-1135		 CWE-444 Medium
No
No
 1.0.307 06.05.2024 SB2024050631
SB2024050632
SB2024050633
and 40 more
#VU86052 - Use After Free
CVE-2024-25062		 CWE-416 High
No
No
 1.0.307 05.02.2024 SB2024020507
SB2024020508
SB2024020742
and 115 more


Showing elements 1 - 20 out of 448