Known vulnerabilities in IBM Process Mining - page 8

Vendor: IBM Corporation
Software: IBM Process Mining
Software CPE: cpe:2.3:a:ibm_corporation:ibm_process_mining:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 318
Public exploits: 38
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Process Mining IBM Process Mining is affected by 318 known vulnerabilities: 1 critical, 66 high, 197 medium, 54 low Critical High Medium Low

Vulnerabilities (318)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83993 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-46233		 CWE-327 Medium
No
No
 1.14.3 08.12.2023 SB2023120805
SB2023121211
SB2023122252
and 6 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 1.14.3 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU82548 - Inefficient Algorithmic Complexity
CVE-2023-46136		 CWE-407 Medium
No
No
 1.14.3 30.10.2023 SB2023103003
SB2023103183
SB2023112907
and 73 more
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642		 CWE-770 Medium
No
No
 1.14.2.0.1 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU82079 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-48566		 CWE-362 Medium
No
No
 1.14.2 17.10.2023 SB2023101709
SB2023101713
SB2023101714
and 17 more
#VU82078 - Use After Free
CVE-2022-48560		 CWE-416 Medium
No
No
 1.14.2 17.10.2023 SB2023101708
SB2023101712
SB20231017145
and 29 more
#VU82077 - Resource exhaustion
CVE-2022-48564		 CWE-400 Medium
No
No
 1.14.2 17.10.2023 SB2023101707
SB20231123125
SB2023112746
and 19 more
#VU81800 - Resource Management Errors
CVE-2023-42795		 CWE-399 Medium
No
No
 1.14.3 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648		 CWE-444 Medium
No
No
 1.14.3 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 1.14.3 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804		 CWE-200 Low
Available
No
 1.14.3 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU81056 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41040		 CWE-22 Low
No
No
 1.14.2.0.1 22.09.2023 SB2023092227
SB2023102621
SB2023110908
and 6 more
#VU80793 - Improper Authorization
CVE-2023-41900		 CWE-285 Low
No
No
 1.14.2.0.1 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 29 more
#VU80792 - Improper input validation
CVE-2023-36479		 CWE-20 Medium
No
No
 1.14.2.0.1 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 1.14.2.0.1 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU80564 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-48565		 CWE-611 Medium
Available
No
 1.14.2 08.09.2023 SB2023090833
SB2023090836
SB2023101232
and 24 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Available
No
 1.14.2.0.1 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU79490 - Improper Certificate Validation
CVE-2023-38325		 CWE-295 Medium
No
No
 1.14.2 14.08.2023 SB2023081446
SB20230821188
SB20230821192
and 21 more
#VU77102 - Stack-based buffer overflow
CVE-2022-45688		 CWE-121 Medium
No
No
 1.14.2 08.06.2023 SB2023060836
SB2023060927
SB2023071959
and 35 more
#VU75217 - Improper input validation
CVE-2023-26049		 CWE-20 Low
No
No
 1.14.2 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more


Showing elements 141 - 160 out of 318