Known vulnerabilities in IBM Observability with Instana - page 3

Vendor: IBM Corporation
Software: IBM Observability with Instana
Software CPE: cpe:2.3:a:ibm_corporation:ibm_observability_with_instana:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 448
Public exploits: 35
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Observability with Instana IBM Observability with Instana is affected by 448 known vulnerabilities: 3 critical, 70 high, 287 medium, 88 low Critical High Medium Low

Vulnerabilities (448)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117682 - Resource exhaustion
CVE-2025-61795		 CWE-400 Medium
No
No
 1.0.309 27.10.2025 SB2025102749
SB20251031122
SB20251031123
and 39 more
#VU117681 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-55752		 CWE-22 High
Available
No
 1.0.309 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 43 more
#VU117680 - Improper Output Neutralization for Logs
CVE-2025-55754		 CWE-117 Low
No
No
 1.0.309 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 27 more
#VU116196 - Memory corruption
CVE-2025-9900		 CWE-119 High
No
No
 1.0.309 30.09.2025 SB2025093033
SB2025093035
SB2025100921
and 50 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 1.0.309 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU115570 - Protection Mechanism Failure
CVE-2025-41248		 CWE-693 Medium
No
No
 1.0.309 16.09.2025 SB20250916313
SB2025100741
SB20251008143
and 33 more
#VU115325 - Improper Access Control
CVE-2025-43342		 CWE-284 Low
No
No
 1.0.309 16.09.2025 SB20250916326
SB20250916330
SB20250916387
and 24 more
#VU114558 - Missing release of memory after effective lifetime
CVE-2025-58058		 CWE-401 Medium
No
No
 1.0.309 29.08.2025 SB2025082919
SB2025083001
SB2025090123
and 39 more
#VU114096 - Improper input validation
CVE-2025-8715		 CWE-20 Medium
No
No
 1.0.309 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 52 more
#VU114095 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8714		 CWE-94 Low
Available
No
 1.0.309 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 60 more
#VU114088 - Stack-based buffer overflow
CVE-2025-5222		 CWE-121 High
No
No
 1.0.309 14.08.2025 SB2025081454
SB2025081455
SB2025081456
and 34 more
#VU112435 - Resource exhaustion
CVE-2025-29786		 CWE-400 Medium
No
No
 1.0.309 07.07.2025 SB2025070753
SB2025070755
SB2025121138
and 1 more
#VU111223 - Type confusion
CVE-2025-49796		 CWE-843 Medium
No
No
 1.0.309 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 84 more
#VU111221 - Use After Free
CVE-2025-49794		 CWE-416 Medium
No
No
 1.0.309 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 65 more
#VU108114 - Resource exhaustion
CVE-2024-52979		 CWE-400 Medium
No
No
 1.0.309 01.05.2025 SB2025050126
SB2025121138
SB2026041711
#VU96731 - Improper Certificate Validation
CVE-2024-39689		 CWE-295 High
No
No
 1.0.309 03.09.2024 SB2024090358
SB2024090359
SB2024090440
and 50 more
#VU88696 - Improper input validation
CVE-2024-21096		 CWE-20 Low
No
No
 1.0.309 17.04.2024 SB2024041799
SB2024051083
SB2024051084
and 40 more
#VU18424 - Permissions, Privileges, and Access Controls
CVE-2019-10130		 CWE-264 Low
No
No
 1.0.309 10.05.2019 SB2019051001
SB2019051002
SB2019051513
and 29 more
#VU6892 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7484		 CWE-200 Low
No
No
 1.0.309 02.06.2017 SB2017052914
SB2017052915
SB2017073109
and 20 more
#VU43840 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2012-0868		 CWE-89 Medium
No
No
 1.0.309 19.07.2012 SB2012071904
SB2012092802
SB2025090533
and 14 more


Showing elements 41 - 60 out of 448