Known vulnerabilities in IBM Observability with Instana 276

Vendor: IBM Corporation
Software: IBM Observability with Instana
Version: 276
Software CPE: cpe:2.3:a:ibm_corporation:ibm_observability_with_instana:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 49
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Observability with Instana version 276 IBM Observability with Instana 276 is affected by 49 vulnerabilities: 5 high, 31 medium, 13 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110232 - Out-of-bounds read
CVE-2023-29942		 CWE-125 Low
No
No
 1.0.297 06.06.2025 SB2023050533
SB2025060628
#VU109941 - Resource exhaustion
CVE-2025-32907		 CWE-400 Medium
No
No
 1.0.297 29.05.2025 SB2025052993
SB2025052994
SB2025052995
and 27 more
#VU109240 - Configuration
CVE-2025-27820		 CWE-16 Medium
No
No
 1.0.297 16.05.2025 SB2025051604
SB2025060628
SB2025063009
and 10 more
#VU107966 - Missing Authorization
CVE-2025-22235		 CWE-862 Medium
No
No
 1.0.297 25.04.2025 SB2025042526
SB2025060429
SB2025060529
and 15 more
#VU106970 - Heap-based Buffer Overflow
CVE-2025-31115		 CWE-122 High
No
No
 1.0.297 03.04.2025 SB20250403127
SB20250403129
SB20250403137
and 19 more
#VU106926 - Resource Management Errors
CVE-2024-57699		 CWE-399 Medium
No
No
 1.0.297 03.04.2025 SB2025040317
SB2025040325
SB2025040326
and 64 more
#VU104099 - Use After Free
CVE-2024-56171		 CWE-416 High
No
No
 1.0.297 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928		 CWE-121 High
No
No
 1.0.297 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU103502 - Use After Free
CVE-2022-49043		 CWE-416 Medium
No
No
 1.0.297 03.02.2025 SB2025020327
SB2025020330
SB2025020353
and 60 more
#VU98648 - Improper input validation
CVE-2024-21217		 CWE-20 Low
No
No
 1.0.297 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU96644 - Improper input validation
CVE-2024-7246		 CWE-20 Medium
No
No
 1.0.297 30.08.2024 SB2024083031
SB2024083036
SB2024090612
and 11 more
#VU95441 - Missing release of memory after effective lifetime
CVE-2024-26462		 CWE-401 Medium
No
No
 1.0.297 07.08.2024 SB2024040939
SB2024080724
SB2024080725
and 18 more
#VU95166 - Incorrect Authorization
CVE-2024-27309		 CWE-863 Medium
No
No
 1.0.297 02.08.2024 SB2024080227
SB2024080228
SB20240827147
and 5 more
#VU87570 - Improper Access Control
CVE-2024-23944		 CWE-284 Low
No
No
 1.0.297 15.03.2024 SB2024031533
SB2024052921
SB2024061902
and 23 more
#VU86808 - Resource exhaustion
CVE-2024-22201		 CWE-400 Medium
No
No
 1.0.297 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU84540 - Unchecked Return Value
CVE-2023-6918		 CWE-252 Low
No
No
 1.0.297 19.12.2023 SB2023121906
SB2023121910
SB2023121911
and 63 more
#VU80828 - Allocation of Resources Without Limits or Throttling
CVE-2023-33953		 CWE-770 Medium
No
No
 1.0.297 15.09.2023 SB2023091533
SB2023110913
SB2024022138
and 9 more
#VU79796 - Improper input validation
CVE-2023-32732		 CWE-20 Medium
No
No
 1.0.297 21.08.2023 SB2023082198
SB20230821106
SB20230821107
and 16 more
#VU69104 - Permissions, Privileges, and Access Controls
CVE-2022-37967		 CWE-264 Low
No
No
 1.0.297 08.11.2022 SB2022110827
SB2022121537
SB2022121801
and 13 more
#VU9687 - Memory corruption
CVE-2017-9047		 CWE-119 Low
No
No
 1.0.297 19.12.2017 SB2017121308
SB2017111019
SB2022110928
and 29 more


Showing elements 1 - 20 out of 49