Known vulnerabilities in IBM Observability with Instana - page 19

Vendor: IBM Corporation
Software: IBM Observability with Instana
Software CPE: cpe:2.3:a:ibm_corporation:ibm_observability_with_instana:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 448
Public exploits: 35
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Observability with Instana IBM Observability with Instana is affected by 448 known vulnerabilities: 3 critical, 70 high, 287 medium, 88 low Critical High Medium Low

Vulnerabilities (448)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86779 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2023-37404		 CWE-350 High
No
No
 1.0.255 26.02.2024 SB2024022621
#VU85583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-49569		 CWE-22 Medium
No
No
 265 18.01.2024 SB2024011878
SB2024011879
SB2024020832
and 42 more
#VU85582 - Resource exhaustion
CVE-2023-49568		 CWE-400 Medium
No
No
 265 18.01.2024 SB2024011878
SB2024011879
SB2024020832
and 37 more
#VU85467 - Improper input validation
CVE-2024-20932		 CWE-20 Medium
No
No
 267 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 47 more
#VU85468 - Improper input validation
CVE-2024-20918		 CWE-20 Medium
No
No
 266 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85471 - Improper input validation
CVE-2024-20921		 CWE-20 Medium
No
No
 267 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85473 - Improper input validation
CVE-2024-20945		 CWE-20 Low
No
No
 267 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU85267 - Covert Timing Channel
CVE-2023-5388		 CWE-385 Medium
No
No
 267 10.01.2024 SB2024011031
SB2024011042
SB2024011043
and 96 more
#VU84037 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-34062		 CWE-22 Medium
No
No
 266 11.12.2023 SB2023121107
SB2024013141
SB2024020233
and 6 more
#VU84031 - Improper Certificate Validation
CVE-2023-4586		 CWE-295 Medium
No
No
 266 08.12.2023 SB2023121105
SB2023121203
SB20231222102
and 15 more
#VU83582 - Improper input validation
CVE-2023-34053		 CWE-20 Medium
No
No
 266 29.11.2023 SB2023112966
SB2023112967
SB2024011661
and 13 more
#VU83581 - Improper input validation
CVE-2023-34055		 CWE-20 Medium
No
No
 266 29.11.2023 SB2023112967
SB2024011660
SB2024011661
and 22 more
#VU83580 - Improper input validation
CVE-2023-34054		 CWE-20 Medium
No
No
 266 29.11.2023 SB2023112965
SB2024013141
SB2024020233
and 6 more
#VU81044 - Out-of-bounds read
CVE-2023-39615		 CWE-125 Medium
No
No
 267 21.09.2023 SB2023092155
SB2023092202
SB2023092203
and 61 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 266 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU75562 - Improper input validation
CVE-2023-20861		 CWE-20 Medium
No
No
 266 27.04.2023 SB2023042742
SB2023042746
SB2023042832
and 61 more
#VU75409 - Improper input validation
CVE-2023-20863		 CWE-20 Medium
No
No
 266 21.04.2023 SB2023042131
SB2023042132
SB2023050511
and 88 more
#VU70524 - Out-of-bounds write
CVE-2022-41854		 CWE-787 Medium
No
No
 267 28.12.2022 SB2022122813
SB2022122926
SB2023010417
and 52 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 267 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752		 CWE-121 Medium
No
No
 267 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more


Showing elements 361 - 380 out of 448