Known vulnerabilities in IBM Process Mining 1.15.0 IF003 - page 2

Vendor: IBM Corporation
Software: IBM Process Mining
Version: 1.15.0 IF003
Software CPE: cpe:2.3:a:ibm_corporation:ibm_process_mining:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 30
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Process Mining version 1.15.0 IF003 IBM Process Mining 1.15.0 IF003 is affected by 30 vulnerabilities: 5 high, 23 medium, 2 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99566 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49766		 CWE-22 Medium
No
No
 2.0 31.10.2024 SB2024103173
SB2024121313
SB2024121851
and 16 more
#VU98519 - Resource exhaustion
CVE-2024-6762		 CWE-400 Medium
No
No
 2.0 14.10.2024 SB20241014113
SB2024110897
SB2025040503
and 2 more
#VU98518 - Resource exhaustion
CVE-2024-9823		 CWE-400 Medium
No
No
 2.0 14.10.2024 SB20241014112
SB2024120637
SB2025011709
and 14 more
#VU98267 - Inefficient Algorithmic Complexity
CVE-2024-43485		 CWE-407 Medium
No
No
 2.0 09.10.2024 SB2024100927
SB2024100946
SB2024100978
and 12 more
#VU97217 - Resource exhaustion
CVE-2024-34158		 CWE-400 Medium
No
No
 2.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 76 more
#VU97216 - Resource exhaustion
CVE-2024-34156		 CWE-400 Medium
No
No
 2.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU97215 - Resource exhaustion
CVE-2024-34155		 CWE-400 Medium
No
No
 2.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU70123 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-37601		 CWE-94 High
No
No
 2.0 12.12.2022 SB2022121220
SB2023010419
SB2023011403
and 20 more
#VU70122 - Incorrect Regular Expression
CVE-2022-37599		 CWE-185 Medium
No
No
 2.0 12.12.2022 SB2022121221
SB2023010424
SB2023020920
and 19 more
#VU69675 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24999		 CWE-94 Medium
Public exploit available
No
 2.0 29.11.2022 SB2022112910
SB2022112911
SB2022112943
and 49 more


Showing elements 21 - 40 out of 30