Known vulnerabilities in IBM Process Mining 1.15.0 IF004

Vendor: IBM Corporation
Software: IBM Process Mining
Version: 1.15.0 IF004
Software CPE: cpe:2.3:a:ibm_corporation:ibm_process_mining:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 30
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Process Mining version 1.15.0 IF004 IBM Process Mining 1.15.0 IF004 is affected by 30 vulnerabilities: 5 high, 23 medium, 2 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141		 CWE-200 Medium
No
No
 2.0 21.11.2024 SB2024112150
SB2024120226
SB2024120331
and 34 more
#VU100676 - Improper Authorization
CVE-2024-38827		 CWE-285 Medium
No
No
 2.0 19.11.2024 SB2024111987
SB2025012185
SB2025012188
and 30 more
#VU100601 - Missing release of memory after effective lifetime
CVE-2024-52303		 CWE-401 Medium
No
No
 2.0 19.11.2024 SB2024111901
SB2024121313
SB2025031422
and 4 more
#VU100600 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-52304		 CWE-444 Medium
No
No
 2.0 19.11.2024 SB2024111901
SB2024111916
SB2024111917
and 19 more
#VU100588 - Improper Authentication
CVE-2024-52316		 CWE-287 Low
No
No
 2.0 18.11.2024 SB2024111823
SB2024112550
SB2024112832
and 36 more
#VU100587 - Resource Management Errors
CVE-2024-52317		 CWE-399 Medium
Public exploit available
No
 2.0 18.11.2024 SB2024111823
SB2024112550
SB2024121231
and 27 more
#VU100095 - Memory corruption
CVE-2024-47072		 CWE-119 Medium
No
No
 2.0 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 36 more
#VU99975 - Authentication Bypass by Spoofing
CVE-2024-51504		 CWE-290 High
No
No
 2.0 06.11.2024 SB2024110667
SB2024121231
SB2024122015
and 12 more
#VU99567 - Resource exhaustion
CVE-2024-49767		 CWE-400 Medium
No
No
 2.0 31.10.2024 SB2024103173
SB2024103176
SB2024110601
and 30 more
#VU98795 - Security Features
CVE-2024-38820		 CWE-254 Medium
No
No
 2.0 17.10.2024 SB2024101781
SB2024112618
SB2024120428
and 40 more
#VU97243 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-38998		 CWE-1321 High
No
No
 2.0 13.09.2024 SB2024091338
SB2024091626
SB2024103080
and 4 more
#VU96058 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50314		 CWE-200 Low
No
No
 2.0 15.08.2024 SB2024081566
SB2024091324
SB2024091814
and 44 more
#VU96003 - UNIX Symbolic Link (Symlink) Following
CVE-2024-42367		 CWE-61 High
No
No
 2.0 14.08.2024 SB2024081446
SB2024100968
SB2024101875
and 3 more
#VU93077 - Improper input validation
CVE-2024-38428		 CWE-20 Medium
No
No
 2.0 22.06.2024 SB2024062208
SB2024062219
SB2024062421
and 45 more
#VU71577 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-46175		 CWE-94 Medium
No
No
 2.0 26.01.2023 SB2023012644
SB2023012645
SB2023013117
and 44 more
#VU71398 - Insufficient Verification of Data Authenticity
CVE-2022-23491		 CWE-345 High
No
No
 2.0 20.01.2023 SB2023012034
SB2023012035
SB2023012036
and 51 more
#VU70121 - Incorrect Regular Expression
CVE-2022-37603		 CWE-185 Medium
No
No
 2.0 12.12.2022 SB2022121221
SB2022121222
SB2023010418
and 29 more
#VU54077 - Resource exhaustion
CVE-2021-33503		 CWE-400 Medium
No
No
 2.0 13.06.2021 SB2021061304
SB2021061305
SB2021071501
and 36 more
#VU47403 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26137		 CWE-93 Medium
No
No
 2.0 30.09.2020 SB2020100716
SB2020121420
SB2021052028
and 35 more
#VU26108 - Resource exhaustion
CVE-2020-7212		 CWE-400 Medium
No
No
 2.0 17.03.2020 SB2020031708
SB2024031228
SB20240731208
and 3 more


Showing elements 1 - 20 out of 30