Known vulnerabilities in IBM Process Mining - page 7

Vendor: IBM Corporation
Software: IBM Process Mining
Software CPE: cpe:2.3:a:ibm_corporation:ibm_process_mining:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 318
Public exploits: 38
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Process Mining IBM Process Mining is affected by 318 known vulnerabilities: 1 critical, 66 high, 197 medium, 54 low Critical High Medium Low

Vulnerabilities (318)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87129 - NULL Pointer Dereference
CVE-2024-26130		 CWE-476 Medium
No
No
 1.14.4 05.03.2024 SB2024030534
SB2024030535
SB2024030546
and 41 more
#VU85901 - Exposure of sensitive information to an unauthorized actor
CVE-2023-20866		 CWE-200 Low
No
No
 1.14.2 30.01.2024 SB2024013026
SB2023041278
#VU85848 - Resource exhaustion
CVE-2023-6481		 CWE-400 Medium
No
No
 1.14.3 29.01.2024 SB2024012902
SB2024020727
SB2024020840
and 23 more
#VU85747 - Observable discrepancy
CVE-2023-52323		 CWE-203 Low
No
No
 1.14.4 24.01.2024 SB2024012414
SB2024012416
SB2024022053
and 24 more
#VU85618 - Deserialization of Untrusted Data
CVE-2023-6378		 CWE-502 Medium
No
No
 1.14.3 19.01.2024 SB2024011926
SB2024011927
SB2024012316
and 39 more
#VU85564 - Deserialization of Untrusted Data
CVE-2023-47248		 CWE-502 High
No
No
 1.14.3 18.01.2024 SB2024011810
SB2024011817
SB2024011818
and 9 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 1.14.4 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU85304 - Excessive Iteration
CVE-2023-4043		 CWE-834 Medium
No
No
 1.14.3 11.01.2024 SB2024011123
SB2024012646
SB2024020506
and 15 more
#VU84031 - Improper Certificate Validation
CVE-2023-4586		 CWE-295 Medium
No
No
 1.14.3 08.12.2023 SB2023121105
SB2023121203
SB20231222102
and 15 more
#VU83930 - NULL Pointer Dereference
CVE-2023-49083		 CWE-476 Medium
No
No
 1.14.3 06.12.2023 SB2023120655
SB2023120656
SB2023121440
and 63 more
#VU83582 - Improper input validation
CVE-2023-34053		 CWE-20 Medium
No
No
 1.14.4 29.11.2023 SB2023112966
SB2023112967
SB2024011661
and 13 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 1.14.3 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU83312 - Authorization Bypass Through User-Controlled Key
CVE-2023-44981		 CWE-639 Medium
No
No
 1.14.3 20.11.2023 SB2023112072
SB2023112073
SB2023112077
and 45 more
#VU83240 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-48345		 CWE-79 Medium
No
No
 1.14.0 17.11.2023 SB2023111725
SB2024022230
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 1.14.3 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU82558 - Cross-Site Request Forgery (CSRF)
CVE-2023-45857		 CWE-352 Low
No
No
 1.14.3 30.10.2023 SB2023103024
SB2023113014
SB2023121224
and 41 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 1.14.3 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU81726 - Integer overflow
CVE-2023-36478		 CWE-190 Medium
No
No
 1.14.3 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80886 - Incorrect Permission Assignment for Critical Resource
CVE-2023-34042		 CWE-732 Low
No
No
 1.14.3 19.09.2023 SB2023091922
SB2023112217
SB2023120414
and 6 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 1.14.4 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more


Showing elements 121 - 140 out of 318