Known vulnerabilities in IBM Process Mining 1.15.0 IF001 - page 2

Vendor: IBM Corporation
Software: IBM Process Mining
Version: 1.15.0 IF001
Software CPE: cpe:2.3:a:ibm_corporation:ibm_process_mining:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 42
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Process Mining version 1.15.0 IF001 IBM Process Mining 1.15.0 IF001 is affected by 42 vulnerabilities: 5 high, 30 medium, 7 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99566 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49766		 CWE-22 Medium
No
No
 2.0 31.10.2024 SB2024103173
SB2024121313
SB2024121851
and 16 more
#VU98519 - Resource exhaustion
CVE-2024-6762		 CWE-400 Medium
No
No
 2.0 14.10.2024 SB20241014113
SB2024110897
SB2025040503
and 2 more
#VU98518 - Resource exhaustion
CVE-2024-9823		 CWE-400 Medium
No
No
 2.0 14.10.2024 SB20241014112
SB2024120637
SB2025011709
and 14 more
#VU98267 - Inefficient Algorithmic Complexity
CVE-2024-43485		 CWE-407 Medium
No
No
 2.0 09.10.2024 SB2024100927
SB2024100946
SB2024100978
and 12 more
#VU97215 - Resource exhaustion
CVE-2024-34155		 CWE-400 Medium
No
No
 2.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU96058 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50314		 CWE-200 Low
No
No
 2.0 15.08.2024 SB2024081566
SB2024091324
SB2024091814
and 44 more
#VU94555 - Improper input validation
CVE-2024-21147		 CWE-20 Medium
No
No
 1.15.0 IF002 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU94556 - Improper input validation
CVE-2024-21145		 CWE-20 Medium
No
No
 1.15.0 IF002 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU94557 - Improper input validation
CVE-2024-21140		 CWE-20 Medium
No
No
 1.15.0 IF002 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 119 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 1.15.0 IF002 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU94560 - Improper input validation
CVE-2024-21138		 CWE-20 Low
No
No
 1.15.0 IF002 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 117 more
#VU92075 - UNIX Symbolic Link (Symlink) Following
CVE-2024-35235		 CWE-61 Low
Public exploit available
No
 1.15.0 IF002 13.06.2024 SB2024061389
SB2024061398
SB2024061399
and 29 more
#VU87201 - Improper input validation
CVE-2024-24784		 CWE-20 Medium
No
No
 1.15.0 IF002 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785		 CWE-79 Low
No
No
 1.15.0 IF002 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87197 - Resource exhaustion
CVE-2023-45290		 CWE-400 Medium
No
No
 1.15.0 IF002 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 1.15.0 IF002 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU70123 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-37601		 CWE-94 High
No
No
 2.0 12.12.2022 SB2022121220
SB2023010419
SB2023011403
and 20 more
#VU70122 - Incorrect Regular Expression
CVE-2022-37599		 CWE-185 Medium
No
No
 2.0 12.12.2022 SB2022121221
SB2023010424
SB2023020920
and 19 more
#VU69675 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24999		 CWE-94 Medium
Public exploit available
No
 2.0 29.11.2022 SB2022112910
SB2022112911
SB2022112943
and 49 more
#VU26108 - Resource exhaustion
CVE-2020-7212		 CWE-400 Medium
No
No
 2.0 17.03.2020 SB2020031708
SB2024031228
SB20240731208
and 3 more


Showing elements 21 - 40 out of 42