Known vulnerabilities in IBM Observability with Instana - page 20

Vendor: IBM Corporation
Software: IBM Observability with Instana
Software CPE: cpe:2.3:a:ibm_corporation:ibm_observability_with_instana:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 448
Public exploits: 35
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Observability with Instana IBM Observability with Instana is affected by 448 known vulnerabilities: 3 critical, 70 high, 287 medium, 88 low Critical High Medium Low

Vulnerabilities (448)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85950 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-20218		 CWE-22 Medium
No
No
 265 31.01.2024 SB2024013143
SB2024032727
SB2021121542
#VU85848 - Resource exhaustion
CVE-2023-6481		 CWE-400 Medium
No
No
 266 29.01.2024 SB2024012902
SB2024020727
SB2024020840
and 23 more
#VU84825 - Argument Injection or Modification
CVE-2022-24440		 CWE-88 High
No
No
 - 28.12.2023 SB2023122805
#VU84822 - Argument Injection or Modification
CVE-2022-21223		 CWE-88 High
No
No
 - 28.12.2023 SB2023122805
#VU83242 - Resource exhaustion
CVE-2023-43646		 CWE-400 Medium
No
No
 265 17.11.2023 SB2023111725
SB2024010322
SB2024013046
and 5 more
#VU82816 - Allocation of Resources Without Limits or Throttling
CVE-2023-39533		 CWE-770 Medium
No
No
 265 07.11.2023 SB2023110713
SB2023111725
SB2023113021
and 8 more
#VU80792 - Improper input validation
CVE-2023-36479		 CWE-20 Medium
No
No
 266 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 - 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409		 CWE-295 Medium
No
No
 266 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 266 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU77531 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29405		 CWE-94 Medium
No
No
 - 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 45 more
#VU77361 - Integer overflow
CVE-2023-34454		 CWE-190 Medium
No
No
 266 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 39 more
#VU77359 - Integer overflow
CVE-2023-34453		 CWE-190 Medium
No
No
 266 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 40 more
#VU77102 - Stack-based buffer overflow
CVE-2022-45688		 CWE-121 Medium
No
No
 - 08.06.2023 SB2023060836
SB2023060927
SB2023071959
and 35 more
#VU76462 - Missing Authorization
CVE-2023-33246		 CWE-862 Critical
Available
Exploited
 255 24.05.2023 SB2023052415
SB2024020514
#VU76427 - Resource Management Errors
CVE-2023-20883		 CWE-399 Medium
No
No
 - 23.05.2023 SB2023052310
SB2023052311
SB2023061548
and 42 more
#VU76041 - Permissions, Privileges, and Access Controls
CVE-2023-2454		 CWE-264 Medium
No
No
 265 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 55 more
#VU75561 - Improper input validation
CVE-2023-20860		 CWE-20 Medium
No
No
 - 27.04.2023 SB2023042742
SB2023042746
SB2023050518
and 34 more
#VU66747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31197		 CWE-89 High
No
No
 265 24.08.2022 SB2022082432
SB2022082543
SB2022090901
and 27 more
#VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-37714		 CWE-835 Medium
No
No
 - 16.11.2021 SB2021111606
SB2021111715
SB2022012314
and 24 more


Showing elements 381 - 400 out of 448