Known vulnerabilities in IBM Process Mining - page 13

Vendor: IBM Corporation
Software: IBM Process Mining
Software CPE: cpe:2.3:a:ibm_corporation:ibm_process_mining:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 318
Public exploits: 38
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Process Mining IBM Process Mining is affected by 318 known vulnerabilities: 1 critical, 66 high, 197 medium, 54 low Critical High Medium Low

Vulnerabilities (318)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69942 - Incorrect Regular Expression
CVE-2022-3517		 CWE-185 Medium
No
No
 1.13.2 06.12.2022 SB2022120638
SB2022120639
SB2022120640
and 48 more
#VU69674 - Resource exhaustion
CVE-2022-40150		 CWE-400 Medium
No
No
 1.13.2 29.11.2022 SB2022112909
SB2022112941
SB2022121101
and 46 more
#VU69673 - Out-of-bounds write
CVE-2022-40149		 CWE-787 Medium
No
No
 1.13.2 29.11.2022 SB2022112909
SB2022112941
SB2022121101
and 41 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252		 CWE-444 Medium
No
No
 1.13.2 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 1.13.2 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 1.13.2 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 1.13.1 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752		 CWE-121 Medium
No
No
 1.13.1 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more
#VU67663 - Out-of-bounds write
CVE-2022-38751		 CWE-787 Medium
No
No
 1.13.1 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU66400 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-33987		 CWE-601 Medium
No
No
 1.13.1 11.08.2022 SB2022081124
SB2022081525
SB2022090835
and 22 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 1.13.0.0 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU65831 - Improper input validation
CVE-2022-2047		 CWE-20 Low
No
No
 1.13.1 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more
#VU65830 - Resource Management Errors
CVE-2022-2048		 CWE-399 Medium
No
No
 1.13.0.0 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 44 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785		 CWE-22 Medium
No
No
 1.13.1 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 65 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 1.13.0.0 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU60079 - Permissions, Privileges, and Access Controls
CVE-2022-23181		 CWE-264 Low
No
No
 1.12.0.4 27.01.2022 SB2022012708
SB2022030854
SB2022041951
and 25 more
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 1.12.0.4 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 59 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 1.12.0.4 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU50496 - Improper input validation
CVE-2021-26701		 CWE-20 High
No
No
 1.13.2 09.02.2021 SB2021020950
SB2021031210
SB2021031211
and 18 more
#VU37072 - Improper input validation
CVE-2018-3721		 CWE-20 Medium
No
No
 1.12.0.4 07.06.2018 SB2018060730
SB2022062806
SB2022101801
and 7 more


Showing elements 241 - 260 out of 318