Known vulnerabilities in IBM Observability with Instana 285

Vendor: IBM Corporation
Software: IBM Observability with Instana
Version: 285
Software CPE: cpe:2.3:a:ibm_corporation:ibm_observability_with_instana:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 36
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Observability with Instana version 285 IBM Observability with Instana 285 is affected by 36 vulnerabilities: 5 high, 22 medium, 9 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110232 - Out-of-bounds read
CVE-2023-29942		 CWE-125 Low
No
No
 1.0.297 06.06.2025 SB2023050533
SB2025060628
#VU109251 - Security Features
CVE-2025-22233		 CWE-254 Low
No
No
 1.0.297 16.05.2025 SB2025051612
SB2025060628
SB2025062507
and 20 more
#VU106970 - Heap-based Buffer Overflow
CVE-2025-31115		 CWE-122 High
No
No
 1.0.297 03.04.2025 SB20250403127
SB20250403129
SB20250403137
and 19 more
#VU106926 - Resource Management Errors
CVE-2024-57699		 CWE-399 Medium
No
No
 1.0.297 03.04.2025 SB2025040317
SB2025040325
SB2025040326
and 64 more
#VU105984 - Inefficient Regular Expression Complexity
CVE-2025-27789		 CWE-1333 Low
No
No
 1.0.297 24.03.2025 SB2025032476
SB2025041020
SB2025041691
and 45 more
#VU103771 - Improper Authentication
CVE-2024-12797		 CWE-287 Medium
No
No
 1.0.297 11.02.2025 SB2025021187
SB20250211108
SB20250211159
and 60 more
#VU103502 - Use After Free
CVE-2022-49043		 CWE-416 Medium
No
No
 1.0.297 03.02.2025 SB2025020327
SB2025020330
SB2025020353
and 60 more
#VU98648 - Improper input validation
CVE-2024-21217		 CWE-20 Low
No
No
 1.0.297 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU96644 - Improper input validation
CVE-2024-7246		 CWE-20 Medium
No
No
 1.0.297 30.08.2024 SB2024083031
SB2024083036
SB2024090612
and 11 more
#VU95441 - Missing release of memory after effective lifetime
CVE-2024-26462		 CWE-401 Medium
No
No
 1.0.297 07.08.2024 SB2024040939
SB2024080724
SB2024080725
and 18 more
#VU95166 - Incorrect Authorization
CVE-2024-27309		 CWE-863 Medium
No
No
 1.0.297 02.08.2024 SB2024080227
SB2024080228
SB20240827147
and 5 more
#VU87615 - Resource exhaustion
CVE-2023-52428		 CWE-400 Medium
No
No
 1.0.297 19.03.2024 SB2024031924
SB2024040107
SB2024041643
and 43 more
#VU86808 - Resource exhaustion
CVE-2024-22201		 CWE-400 Medium
No
No
 1.0.297 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU84540 - Unchecked Return Value
CVE-2023-6918		 CWE-252 Low
No
No
 1.0.297 19.12.2023 SB2023121906
SB2023121910
SB2023121911
and 63 more
#VU80828 - Allocation of Resources Without Limits or Throttling
CVE-2023-33953		 CWE-770 Medium
No
No
 1.0.297 15.09.2023 SB2023091533
SB2023110913
SB2024022138
and 9 more
#VU79796 - Improper input validation
CVE-2023-32732		 CWE-20 Medium
No
No
 1.0.297 21.08.2023 SB2023082198
SB20230821106
SB20230821107
and 16 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 1.0.297 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU69104 - Permissions, Privileges, and Access Controls
CVE-2022-37967		 CWE-264 Low
No
No
 1.0.297 08.11.2022 SB2022110827
SB2022121537
SB2022121801
and 13 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Public exploit available
Exploited
 1.0.297 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU9687 - Memory corruption
CVE-2017-9047		 CWE-119 Low
No
No
 1.0.297 19.12.2017 SB2017121308
SB2017111019
SB2022110928
and 29 more


Showing elements 1 - 20 out of 36