Known vulnerabilities in IBM Observability with Instana - page 18

Vendor: IBM Corporation
Software: IBM Observability with Instana
Software CPE: cpe:2.3:a:ibm_corporation:ibm_observability_with_instana:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 448
Public exploits: 35
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Observability with Instana IBM Observability with Instana is affected by 448 known vulnerabilities: 3 critical, 70 high, 287 medium, 88 low Critical High Medium Low

Vulnerabilities (448)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 268 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU86992 - Allocation of Resources Without Limits or Throttling
CVE-2024-21634		 CWE-770 Medium
No
No
 266 04.03.2024 SB2024030419
SB2024031125
SB2024032143
and 18 more
#VU86983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-1597		 CWE-89 High
No
No
 269 04.03.2024 SB2024030405
SB2024030406
SB2024030427
and 47 more
#VU86944 - Server-Side Request Forgery (SSRF)
CVE-2023-42282		 CWE-918 Medium
No
No
 268 01.03.2024 SB2024030127
SB2024030148
SB2024030415
and 29 more
#VU85835 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-21647		 CWE-444 Medium
No
No
 266 26.01.2024 SB2024012625
SB2024012628
SB2024030762
and 10 more
#VU85469 - Improper input validation
CVE-2024-20952		 CWE-20 Medium
No
No
 268 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85470 - Improper input validation
CVE-2024-20919		 CWE-20 Medium
No
No
 267 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU82122 - Improper input validation
CVE-2023-35116		 CWE-20 Low
No
No
 268 17.10.2023 SB2023101771
SB20231018117
SB2023101925
and 45 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635		 CWE-681 Medium
No
No
 268 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU80135 - Security Features
CVE-2023-37466		 CWE-254 High
Available
No
 256 30.08.2023 SB2023083012
SB2023083025
SB2023083028
and 7 more
#VU79504 - Security Features
CVE-2023-37903		 CWE-254 Medium
No
No
 256 15.08.2023 SB2023081515
SB2023081517
SB2023081602
and 9 more
#VU78410 - Improper input validation
CVE-2023-22041		 CWE-20 Low
No
No
 268 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 60 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 269 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU69545 - Incorrect Default Permissions
CVE-2022-41946		 CWE-276 Low
No
No
 267 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647		 CWE-502 Medium
No
No
 269 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU55035 - Information Exposure Through Timing Discrepancy
CVE-2020-15522		 CWE-208 Medium
No
No
 269 20.07.2021 SB2021072033
SB2021062601
SB2022062815
and 11 more
#VU52942 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-32052		 CWE-113 Medium
No
No
 268 06.05.2021 SB2021050627
SB2022041125
SB2022041126
and 7 more
#VU48199 - Exposure of sensitive information to an unauthorized actor
CVE-2020-26939		 CWE-200 Medium
No
No
 269 02.11.2020 SB2020110803
SB2024020522
SB2024040108
and 3 more
#VU27043 - Improper input validation
CVE-2018-1000180		 CWE-20 Medium
No
No
 269 21.04.2020 SB2020042107
SB2018092415
SB2021042531
and 17 more
#VU22272 - Missing release of memory after effective lifetime
CVE-2019-17359		 CWE-401 Medium
No
No
 269 24.10.2019 SB2019102418
SB2020011478
SB2020042338
and 14 more


Showing elements 341 - 360 out of 448