Known vulnerabilities in IBM Observability with Instana - page 12

Vendor: IBM Corporation
Software: IBM Observability with Instana
Software CPE: cpe:2.3:a:ibm_corporation:ibm_observability_with_instana:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 448
Public exploits: 35
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Observability with Instana IBM Observability with Instana is affected by 448 known vulnerabilities: 3 critical, 70 high, 287 medium, 88 low Critical High Medium Low

Vulnerabilities (448)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97478 - Inefficient Regular Expression Complexity
CVE-2024-41818		 CWE-1333 Medium
No
No
 284 18.09.2024 SB2024091833
SB2024091834
SB2024092612
and 12 more
#VU97349 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-40866		 CWE-451 Medium
No
No
 284 17.09.2024 SB2024091701
SB2024091702
SB2024091707
and 26 more
#VU96899 - Integer overflow
CVE-2024-45492		 CWE-190 High
No
No
 284 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 108 more
#VU96897 - Buffer Underwrite ('Buffer Underflow')
CVE-2024-45490		 CWE-124 High
No
No
 284 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 113 more
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 284 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU95571 - Command injection
CVE-2024-6923		 CWE-77 Medium
No
No
 284 08.08.2024 SB2024080861
SB2024080862
SB2024080863
and 144 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 284 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU95300 - Exposure of sensitive information to an unauthorized actor
CVE-2024-27838		 CWE-200 Low
No
No
 284 05.08.2024 SB2024080504
SB2024051401
SB2024051361
and 20 more
#VU94882 - Out-of-bounds read
CVE-2024-40789		 CWE-125 Medium
No
No
 284 30.07.2024 SB2024073047
SB2024073048
SB2024073059
and 27 more
#VU94880 - Out-of-bounds read
CVE-2024-40780		 CWE-125 Medium
No
No
 284 30.07.2024 SB2024073047
SB2024073048
SB2024073059
and 29 more
#VU94879 - Out-of-bounds read
CVE-2024-40779		 CWE-125 Medium
No
No
 284 30.07.2024 SB2024073047
SB2024073048
SB2024073059
and 31 more
#VU94877 - Use After Free
CVE-2024-40776		 CWE-416 High
No
No
 284 30.07.2024 SB2024073047
SB2024073048
SB2024073059
and 25 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 284 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU91723 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-35255		 CWE-362 Low
No
No
 283 11.06.2024 SB20240611248
SB2024091320
SB2024091965
and 15 more
#VU89030 - Security Features
CVE-2024-23271		 CWE-254 Medium
No
No
 284 29.04.2024 SB2024042901
SB2024012308
SB2024012249
and 18 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 284 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 281 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU83312 - Authorization Bypass Through User-Controlled Key
CVE-2023-44981		 CWE-639 Medium
No
No
 283 20.11.2023 SB2023112072
SB2023112073
SB2023112077
and 45 more
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642		 CWE-770 Medium
No
No
 283 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690		 CWE-200 Medium
No
No
 283 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more


Showing elements 221 - 240 out of 448