Known vulnerabilities in IBM Observability with Instana - page 13

Vendor: IBM Corporation
Software: IBM Observability with Instana
Software CPE: cpe:2.3:a:ibm_corporation:ibm_observability_with_instana:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 448
Public exploits: 35
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Observability with Instana IBM Observability with Instana is affected by 448 known vulnerabilities: 3 critical, 70 high, 287 medium, 88 low Critical High Medium Low

Vulnerabilities (448)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98554 - Information Exposure Through an Error Message
CVE-2024-23689		 CWE-209 Low
No
No
 283 15.10.2024 SB2024101532
SB2024101533
#VU88828 - Resource exhaustion
CVE-2024-3651		 CWE-400 Medium
No
No
 283 19.04.2024 SB2024041905
SB2024041906
SB2024041907
and 112 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727		 CWE-476 Medium
No
No
 281 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU85170 - State Issues
CVE-2023-6129		 CWE-371 Medium
No
No
 281 09.01.2024 SB2024010929
SB2024012250
SB2024012612
and 69 more
#VU83255 - Improper input validation
CVE-2023-45283		 CWE-20 Low
No
No
 281 17.11.2023 SB2023111740
SB2023111741
SB2023111742
and 20 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545		 CWE-122 High
Available
No
 281 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU77529 - Permissions, Privileges, and Access Controls
CVE-2023-29403		 CWE-264 Medium
No
No
 281 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 46 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400		 CWE-79 Medium
No
No
 281 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540		 CWE-94 Medium
No
No
 281 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539		 CWE-79 Medium
No
No
 281 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538		 CWE-94 High
No
No
 281 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-24537		 CWE-835 Medium
No
No
 281 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 87 more
#VU74572 - Resource Management Errors
CVE-2023-24536		 CWE-399 Medium
No
No
 281 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 80 more
#VU74571 - Resource exhaustion
CVE-2023-24534		 CWE-400 Medium
No
No
 281 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU73722 - Resource exhaustion
CVE-2022-41725		 CWE-400 Medium
No
No
 281 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU73721 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41722		 CWE-22 Medium
No
No
 281 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 13 more
#VU73264 - Incorrect Calculation
CVE-2023-24532		 CWE-682 High
No
No
 281 13.03.2023 SB2023031318
SB2023031319
SB2023031537
and 43 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 281 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72685 - Resource Management Errors
CVE-2022-41724		 CWE-399 Medium
No
No
 281 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996		 CWE-942 Low
No
No
 281 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more


Showing elements 241 - 260 out of 448