Known vulnerabilities in IBM Process Mining - page 11

Software CPE: cpe:2.3:a:ibm_corporation:ibm_process_mining:*:*:*:*:*:*:*:*
Total vulnerabilities: 318
Public exploits: 38
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Process Mining IBM Process Mining is affected by 318 known vulnerabilities: 1 critical, 66 high, 197 medium, 54 low Critical High Medium Low

Vulnerabilities (318)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75431 - Uncontrolled Recursion
CVE-2023-1436
CWE-674 Medium
No
No
1.14.0.0 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU70119 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-41915
CWE-113 Medium
No
No
1.14.0.0 12.12.2022 SB2022121215
SB2023011210
SB2023013027
and 25 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881
CWE-835 Medium
No
No
1.14.0.0 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU69283 - Out-of-bounds write
CVE-2022-40151
CWE-787 Medium
No
No
1.14.0.0 14.11.2022 SB2022111420
SB2022122822
SB2023012670
and 32 more
#VU68866 - Improper Authorization
CVE-2022-31692
CWE-285 High
No
No
1.14.0.0 01.11.2022 SB2022110101
SB2022121119
SB2023011162
and 28 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889
CWE-94 High
Available
Exploited
1.13.2 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU64034 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3918
CWE-94 High
No
No
1.12.0.4 07.06.2022 SB2021111302
SB2022060836
SB2022071504
and 45 more
#VU63700 - Incorrect Regular Expression
CVE-2021-29060
CWE-185 Medium
No
No
1.12.0.4 26.05.2022 SB2021062147
SB2022052615
SB2022101430
and 4 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965
CWE-94 Critical
Available
Exploited
1.12.0.5 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU54852 - Resource exhaustion
CVE-2021-35517
CWE-400 Medium
No
No
1.14.0.0 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 33 more
#VU54851 - Resource exhaustion
CVE-2021-35516
CWE-400 Medium
No
No
1.14.0.0 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 21 more
#VU54394 - Incorrect Regular Expression
CVE-2020-28500
CWE-185 Medium
No
No
1.12.0.4 27.06.2021 SB2021062702
SB2021062703
SB2021090905
and 30 more
#VU52385 - Improper input validation
CVE-2020-27223
CWE-20 Medium
Available
No
1.12.0.4 21.04.2021 SB2021042107
SB2021063002
SB2021063034
and 19 more
#VU51876 - Resource exhaustion
CVE-2021-28165
CWE-400 Medium
No
No
1.12.0.4 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27216
CWE-362 Low
No
No
1.12.0.4 23.10.2020 SB2020121307
SB2020121308
SB2021012011
and 27 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
1.12.0.4 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022
CWE-79 Low
Available
No
1.12.0.4 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU20340 - Resource Management Errors
CVE-2019-9517
CWE-399 Medium
No
No
1.12.0.4 20.08.2019 SB2019082303
SB2019082610
SB2019090202
and 37 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358
CWE-1321 Low
Available
No
1.12.0.4 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251
CWE-79 Low
No
No
1.12.0.4 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more


Showing elements 201 - 220 out of 318