Known vulnerabilities in IBM Observability with Instana - page 15

Vendor: IBM Corporation
Software: IBM Observability with Instana
Software CPE: cpe:2.3:a:ibm_corporation:ibm_observability_with_instana:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 448
Public exploits: 35
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Observability with Instana IBM Observability with Instana is affected by 448 known vulnerabilities: 3 critical, 70 high, 287 medium, 88 low Critical High Medium Low

Vulnerabilities (448)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95816 - Server-Side Request Forgery (SSRF)
CVE-2024-29415		 CWE-918 Medium
Available
No
 277 13.08.2024 SB2024081345
SB2024082612
SB2024082760
and 14 more
#VU94762 - Incorrect Authorization
CVE-2024-41110		 CWE-863 Medium
No
No
 279 26.07.2024 SB2024072641
SB2024080330
SB2024080739
and 39 more
#VU94329 - NULL Pointer Dereference
CVE-2024-37890		 CWE-476 Medium
No
No
 277 15.07.2024 SB2024071508
SB2024071933
SB2024081608
and 32 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 279 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU91160 - Improper input validation
CVE-2024-24790		 CWE-20 Medium
No
No
 279, 282 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 279 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU83508 - Off-by-one Error
CVE-2023-47038		 CWE-193 High
No
No
 277 27.11.2023 SB2023112761
SB2023112763
SB2023112959
and 33 more
#VU83219 - Deserialization of Untrusted Data
CVE-2023-39410		 CWE-502 Medium
No
No
 275 16.11.2023 SB2023111614
SB2023112014
SB2023112410
and 43 more
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 279 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 - 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 274 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804		 CWE-200 Low
Available
No
 274, 279 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3978		 CWE-79 Low
No
No
 - 09.08.2023 SB2023080938
SB2023081013
SB20230821167
and 54 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Available
No
 279 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU71586 - Out-of-bounds write
CVE-2022-40152		 CWE-787 Medium
No
No
 277 26.01.2023 SB2023012669
SB2023012670
SB2023013124
and 52 more
#VU64820 - Information Exposure Through Log Files
CVE-2020-8565		 CWE-532 Low
No
No
 - 30.06.2022 SB2023053114
SB2023103043
SB2024020523
and 10 more
#VU62512 - Improper input validation
CVE-2021-3572		 CWE-20 Medium
No
No
 277 22.04.2022 SB2022042257
SB2022042259
SB2021071390
and 51 more
#VU59319 - Origin Validation Error
CVE-2021-3618		 CWE-346 Medium
No
No
 279 09.01.2022 SB2022010903
SB2022010904
SB2022010905
and 37 more
#VU48600 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-20916		 CWE-22 Medium
No
No
 277 04.09.2020 SB2020090420
SB2020112328
SB2020122208
and 29 more
#VU23636 - Unprotected Storage of Credentials
CVE-2019-11250		 CWE-256 Low
No
No
 - 17.12.2019 SB2019082909
SB2019121707
SB2019121704
and 15 more


Showing elements 281 - 300 out of 448