Known vulnerabilities in IBM Observability with Instana - page 17

Vendor: IBM Corporation
Software: IBM Observability with Instana
Software CPE: cpe:2.3:a:ibm_corporation:ibm_observability_with_instana:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 448
Public exploits: 35
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Observability with Instana IBM Observability with Instana is affected by 448 known vulnerabilities: 3 critical, 70 high, 287 medium, 88 low Critical High Medium Low

Vulnerabilities (448)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262		 CWE-918 Medium
No
No
 272 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172		 CWE-835 Medium
No
No
 273 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89219 - Observable discrepancy
CVE-2024-30171		 CWE-203 Medium
No
No
 273 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 273 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU88532 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-29041		 CWE-601 Medium
No
No
 272 15.04.2024 SB2024041530
SB2024041532
SB2024042918
and 44 more
#VU88394 - Resource exhaustion
CVE-2024-27088		 CWE-400 Low
No
No
 271 10.04.2024 SB2024041057
SB2024041917
SB2024042201
and 10 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 272 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259		 CWE-918 Medium
No
No
 271 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757		 CWE-611 Medium
No
No
 272 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 74 more
#VU86695 - Server-Side Request Forgery (SSRF)
CVE-2024-22243		 CWE-918 Medium
Available
No
 271 21.02.2024 SB2024022140
SB2024030406
SB2024030529
and 45 more
#VU86290 - Stack-based buffer overflow
CVE-2023-51074		 CWE-121 Medium
No
No
 268 09.02.2024 SB2024020912
SB2024021238
SB2024021241
and 37 more
#VU86049 - Insufficient Verification of Data Authenticity
CVE-2024-24557		 CWE-345 Medium
No
No
 271 02.02.2024 SB2024020242
SB2024032237
SB2024032712
and 18 more
#VU85874 - Resource exhaustion
CVE-2023-33202		 CWE-400 Medium
No
No
 272 29.01.2024 SB2024012929
SB2024012930
SB2024013106
and 19 more
#VU85846 - Improper input validation
CVE-2024-22233		 CWE-20 Medium
No
No
 271 26.01.2024 SB2024012665
SB2024041646
SB2024041653
and 5 more
#VU85472 - Improper input validation
CVE-2024-20926		 CWE-20 Medium
No
No
 268 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU83929 - Missing Encryption of Sensitive Data
CVE-2023-45285		 CWE-311 Medium
No
No
 271 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 28 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 268 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU82349 - Cryptographic Issues
CVE-2023-5363		 CWE-310 Low
No
No
 272 24.10.2023 SB2023102443
SB2023102448
SB2023102534
and 46 more
#VU81948 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-4759		 CWE-59 Medium
No
No
 271 12.10.2023 SB2023101242
SB2023101243
SB2023103012
and 21 more
#VU47481 - Improper input validation
CVE-2020-13956		 CWE-20 Medium
No
No
 268 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more


Showing elements 321 - 340 out of 448