Known vulnerabilities in IBM Process Mining - page 4

Vendor: IBM Corporation
Software: IBM Process Mining
Software CPE: cpe:2.3:a:ibm_corporation:ibm_process_mining:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 318
Public exploits: 38
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Process Mining IBM Process Mining is affected by 318 known vulnerabilities: 1 critical, 66 high, 197 medium, 54 low Critical High Medium Low

Vulnerabilities (318)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100117 - Improper input validation
CVE-2024-21534		 CWE-20 High
Available
No
 1.15.0 IF004 08.11.2024 SB2024110840
SB2024110841
SB2024111516
and 17 more
#VU99623 - Resource exhaustion
CVE-2024-49769		 CWE-400 Medium
No
No
 1.15.0 IF004 01.11.2024 SB2024110154
SB20241101104
SB2024110713
and 24 more
#VU99267 - Improper Authorization
CVE-2024-38821		 CWE-285 Medium
Available
No
 1.15.0 IF004 23.10.2024 SB2024102307
SB2024112849
SB2024112910
and 13 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819		 CWE-22 Medium
Available
No
 1.15.0 IF004 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763		 CWE-918 Medium
No
No
 1.15.0 IF004 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 1.15.0 IF003 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801		 CWE-1321 Medium
No
No
 1.15.0 IF003 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU97652 - Resource exhaustion
CVE-2024-38286		 CWE-400 Medium
No
No
 1.15.0 IF004 23.09.2024 SB2024092355
SB2024100267
SB2024102808
and 26 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 1.15.0 IF003 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU96744 - Type confusion
CVE-2024-6119		 CWE-843 Medium
No
No
 1.15.0 IF004 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 1.15.0 IF003 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU94556 - Improper input validation
CVE-2024-21145		 CWE-20 Medium
No
No
 1.15.0 IF002 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU92075 - UNIX Symbolic Link (Symlink) Following
CVE-2024-35235		 CWE-61 Low
Available
No
 1.15.0 IF002 13.06.2024 SB2024061389
SB2024061398
SB2024061399
and 29 more
#VU91159 - Improper input validation
CVE-2024-24789		 CWE-20 Low
No
No
 1.15.0 IF003 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 78 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 1.15.0 IF004 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU86757 - Heap-based Buffer Overflow
CVE-2023-6228		 CWE-122 High
No
No
 1.15.0 IF003 23.02.2024 SB2024022317
SB2024022331
SB2024022771
and 22 more
#VU86755 - Out-of-bounds write
CVE-2023-52356		 CWE-787 High
No
No
 1.15.0 IF003 23.02.2024 SB2024022315
SB2024022316
SB2024022317
and 35 more
#VU78285 - Memory corruption
CVE-2023-25433		 CWE-119 Medium
No
No
 1.15.0 IF003 16.07.2023 SB2023071613
SB2023071619
SB2023081007
and 17 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 1.15.0 IF003 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU16203 - Heap-based Buffer Overflow
CVE-2018-15209		 CWE-122 Low
No
No
 1.15.0 IF003 03.12.2018 SB2018120304
SB2018102427
SB2018102428
and 11 more


Showing elements 61 - 80 out of 318