Known vulnerabilities in IBM Observability with Instana - page 2

Vendor: IBM Corporation
Software: IBM Observability with Instana
Software CPE: cpe:2.3:a:ibm_corporation:ibm_observability_with_instana:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 448
Public exploits: 35
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Observability with Instana IBM Observability with Instana is affected by 448 known vulnerabilities: 3 critical, 70 high, 287 medium, 88 low Critical High Medium Low

Vulnerabilities (448)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123134 - Use of Uninitialized Resource
CVE-2025-55198		 CWE-908 Medium
No
No
 1.0.307 23.02.2026 SB2026022338
SB2026022442
#VU123133 - Allocation of Resources Without Limits or Throttling
CVE-2025-55199		 CWE-770 Medium
No
No
 1.0.307 23.02.2026 SB2026022337
SB2026022442
SB2026042092
#VU118206 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-57319		 CWE-1321 Medium
No
No
 1.0.307 07.11.2025 SB2025110782
SB2025121603
SB2026010606
and 4 more
#VU118179 - Resource exhaustion
CVE-2025-61725		 CWE-400 Medium
No
No
 1.0.311 07.11.2025 SB2025110705
SB2025110714
SB2025110715
and 76 more
#VU118141 - Incorrect Default Permissions
CVE-2024-25621		 CWE-276 Low
No
No
 1.0.311 06.11.2025 SB2025110610
SB2025111276
SB2025112826
and 17 more
#VU117708 - Out-of-bounds read
CVE-2025-11021		 CWE-125 Medium
No
No
 1.0.309 28.10.2025 SB2025102860
SB2025102862
SB2025102864
and 20 more
#VU117483 - Improper input validation
CVE-2025-53066		 CWE-20 Medium
No
No
 1.0.311 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-59343		 CWE-22 High
No
No
 1.0.307 17.10.2025 SB2025101702
SB2025101703
SB2025101704
and 22 more
#VU116684 - Improper input validation
CVE-2025-11226		 CWE-20 Medium
No
No
 1.0.311 07.10.2025 SB2025100745
SB2025100746
SB2025112108
and 19 more
#VU116609 - Use After Free
CVE-2025-49844		 CWE-416 Medium
Available
No
 1.0.307 06.10.2025 SB2025100629
SB2025100633
SB2025100709
and 56 more
#VU116005 - Use of Insufficiently Random Values
CVE-2024-52615		 CWE-330 Medium
No
No
 1.0.307 22.09.2025 SB2025092255
SB2025092256
SB2025092262
and 10 more
#VU115751 - Resource exhaustion
CVE-2025-59375		 CWE-400 Medium
No
No
 1.0.311 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 107 more
#VU115324 - Memory corruption
CVE-2025-43343		 CWE-119 Low
No
No
 1.0.309 16.09.2025 SB20250916326
SB20250916330
SB20250916387
and 24 more
#VU115164 - Improper Authentication
CVE-2025-58060		 CWE-287 High
No
No
 1.0.309 11.09.2025 SB2025091139
SB2025091141
SB2025091147
and 28 more
#VU114094 - Permissions, Privileges, and Access Controls
CVE-2025-8713		 CWE-264 Low
No
No
 1.0.309 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 32 more
#VU113811 - Exposure of resource to wrong sphere
CVE-2025-49574		 CWE-668 Low
No
No
 1.0.307 12.08.2025 SB2025081226
SB2025100107
SB2025100114
and 9 more
#VU113534 - Type confusion
CVE-2025-7424		 CWE-843 High
No
No
 1.0.307 31.07.2025 SB2025073138
SB2025073141
SB2025073142
and 13 more
#VU107611 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-6827		 CWE-444 High
No
No
 1.0.307 18.04.2025 SB2025041831
SB2025041832
SB2025041834
and 15 more
#VU102383 - Use After Free
CVE-2024-46981		 CWE-416 Medium
Available
No
 1.0.307 06.01.2025 SB2025010646
SB2025010647
SB2025010901
and 39 more
#VU100566 - Off-by-one Error
CVE-2024-52533		 CWE-193 High
No
No
 1.0.307 15.11.2024 SB20241115147
SB20241115148
SB20241115149
and 71 more


Showing elements 21 - 40 out of 448