Known vulnerabilities in IBM Process Mining 1.15.0 IF001 - page 2

Vendor: IBM Corporation
Software: IBM Process Mining
Version: 1.15.0 IF001
Software CPE: cpe:2.3:a:ibm_corporation:ibm_process_mining:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 42
Public exploits: 3
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Process Mining version 1.15.0 IF001 IBM Process Mining 1.15.0 IF001 is affected by 42 vulnerabilities: 5 high, 30 medium, 7 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100601 - Missing release of memory after effective lifetime
CVE-2024-52303		 CWE-401 Medium
No
No
 2.0 19.11.2024 SB2024111901
SB2024121313
SB2025031422
and 4 more
#VU100095 - Memory corruption
CVE-2024-47072		 CWE-119 Medium
No
No
 2.0 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 37 more
#VU99975 - Authentication Bypass by Spoofing
CVE-2024-51504		 CWE-290 High
No
No
 2.0 06.11.2024 SB2024110667
SB2024121231
SB2024122015
and 12 more
#VU98519 - Resource exhaustion
CVE-2024-6762		 CWE-400 Medium
No
No
 2.0 14.10.2024 SB20241014113
SB2024110897
SB2025040503
and 2 more
#VU98267 - Inefficient Algorithmic Complexity
CVE-2024-43485		 CWE-407 Medium
No
No
 2.0 09.10.2024 SB2024100927
SB2024100946
SB2024100978
and 12 more
#VU97217 - Resource exhaustion
CVE-2024-34158		 CWE-400 Medium
No
No
 2.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 76 more
#VU97216 - Resource exhaustion
CVE-2024-34156		 CWE-400 Medium
No
No
 2.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU97215 - Resource exhaustion
CVE-2024-34155		 CWE-400 Medium
No
No
 2.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU94555 - Improper input validation
CVE-2024-21147		 CWE-20 Medium
No
No
 1.15.0 IF002 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU94557 - Improper input validation
CVE-2024-21140		 CWE-20 Medium
No
No
 1.15.0 IF002 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 119 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 1.15.0 IF002 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU94560 - Improper input validation
CVE-2024-21138		 CWE-20 Low
No
No
 1.15.0 IF002 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 117 more
#VU93077 - Improper input validation
CVE-2024-38428		 CWE-20 Medium
No
No
 2.0 22.06.2024 SB2024062208
SB2024062219
SB2024062421
and 45 more
#VU87201 - Improper input validation
CVE-2024-24784		 CWE-20 Medium
No
No
 1.15.0 IF002 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785		 CWE-79 Low
No
No
 1.15.0 IF002 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289		 CWE-200 Low
No
No
 1.15.0 IF002 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87197 - Resource exhaustion
CVE-2023-45290		 CWE-400 Medium
No
No
 1.15.0 IF002 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 1.15.0 IF002 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU69675 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24999		 CWE-94 Medium
Public exploit available
No
 2.0 29.11.2022 SB2022112910
SB2022112911
SB2022112943
and 50 more
#VU65442 - Integer overflow
CVE-2022-33068		 CWE-190 Medium
No
No
 1.15.0 IF002 19.07.2022 SB2022071913
SB2022071915
SB2022080431
and 15 more


Showing elements 21 - 40 out of 42