Known vulnerabilities in IBM Observability with Instana - page 4

Vendor: IBM Corporation
Software: IBM Observability with Instana
Software CPE: cpe:2.3:a:ibm_corporation:ibm_observability_with_instana:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 448
Public exploits: 35
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Observability with Instana IBM Observability with Instana is affected by 448 known vulnerabilities: 3 critical, 70 high, 287 medium, 88 low Critical High Medium Low

Vulnerabilities (448)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117707 - Improper input validation
CVE-2025-59952		 CWE-20 Low
No
No
 1.0.309 28.10.2025 SB2025102859
SB2025102861
SB2025102863
and 2 more
#VU114769 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-8941		 CWE-59 Low
No
No
 1.0.304, 1.0.309 03.09.2025 SB2025090350
SB2025090372
SB2025090373
and 20 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 1.0.308 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 45 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 1.0.308 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 38 more
#VU114080 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-47907		 CWE-362 Low
No
No
 1.0.304 14.08.2025 SB2025081423
SB2025081424
SB2025081425
and 50 more
#VU114067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-41242		 CWE-22 Medium
No
No
 1.0.309 14.08.2025 SB2025081411
SB2025100743
SB2025110336
and 18 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 1.0.308 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU113738 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8194		 CWE-835 Medium
No
No
 1.0.304, 1.0.309 07.08.2025 SB2025080731
SB2025080738
SB2025080739
and 93 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 1.0.304 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU113533 - Use After Free
CVE-2025-7425		 CWE-416 High
No
No
 1.0.302 31.07.2025 SB2025073137
SB2025073144
SB2025073053
and 56 more
#VU113156 - Memory corruption
CVE-2025-6965		 CWE-119 Medium
No
No
 1.0.302 22.07.2025 SB2025072254
SB2025072807
SB2025072890
and 100 more
#VU112995 - NULL Pointer Dereference
CVE-2025-6395		 CWE-476 Medium
No
No
 1.0.308 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 70 more
#VU112994 - NULL Pointer Dereference
CVE-2025-32990		 CWE-476 Low
No
No
 1.0.308 16.07.2025 SB20250716122
SB20250716123
SB20250716124
and 79 more
#VU112993 - Double Free
CVE-2025-32988		 CWE-415 Medium
No
No
 1.0.308 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 73 more
#VU112992 - Heap-based Buffer Overflow
CVE-2025-32989		 CWE-122 High
No
No
 1.0.308 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 46 more
#VU110253 - Protection Mechanism Failure
CVE-2025-22874		 CWE-693 Low
No
No
 1.0.302 07.06.2025 SB2025060702
SB2025061002
SB2025081114
and 16 more
#VU110252 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-0913		 CWE-59 Low
No
No
 1.0.302 07.06.2025 SB2025060702
SB2025061002
SB2025061003
and 8 more
#VU110251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4673		 CWE-200 Low
No
No
 1.0.302 07.06.2025 SB2025060701
SB2025060702
SB2025061002
and 35 more
#VU107595 - Out-of-bounds read
CVE-2025-32414		 CWE-125 Medium
No
No
 1.0.304 17.04.2025 SB2025041758
SB2025041850
SB2025041880
and 56 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871		 CWE-444 Medium
No
No
 1.0.302 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more


Showing elements 61 - 80 out of 448