Known vulnerabilities in IBM Process Mining - page 9

Vendor: IBM Corporation
Software: IBM Process Mining
Software CPE: cpe:2.3:a:ibm_corporation:ibm_process_mining:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 318
Public exploits: 38
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Process Mining IBM Process Mining is affected by 318 known vulnerabilities: 1 critical, 66 high, 197 medium, 54 low Critical High Medium Low

Vulnerabilities (318)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81217 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-5484		 CWE-22 Medium
No
No
 1.12.0.4 27.09.2023 SB2023092712
#VU81117 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2021-23460		 CWE-1321 Medium
No
No
 1.13.2 26.09.2023 SB2023092630
#VU81048 - Incorrect Regular Expression
CVE-2021-29059		 CWE-185 Medium
No
No
 1.12.0.4 22.09.2023 SB2023092211
SB2025012076
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635		 CWE-681 Medium
No
No
 1.14.2 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU79519 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-32697		 CWE-94 High
No
No
 1.14.2 15.08.2023 SB2023090805
SB2023090807
SB2023091411
and 7 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 1.14.2 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 1.14.2 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77622 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34981		 CWE-200 Medium
No
No
 1.14.2 22.06.2023 SB2023062241
SB2023070714
SB2023071901
and 24 more
#VU77359 - Integer overflow
CVE-2023-34453		 CWE-190 Medium
No
No
 1.14.2 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 40 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Available
No
 1.14.2 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 1.14.2 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU76601 - Deserialization of Untrusted Data
CVE-2016-1000027		 CWE-502 High
No
No
 1.14.1 29.05.2023 SB2023052915
SB2023060816
SB2023062703
and 24 more
#VU76185 - Incorrect Regular Expression
CVE-2021-3803		 CWE-185 Medium
No
No
 1.12.0.4 16.05.2023 SB2021091716
SB2023051651
SB2023053029
and 12 more
#VU75407 - Security Features
CVE-2023-20873		 CWE-254 Medium
No
No
 1.14.1 21.04.2023 SB2023042129
SB2023042132
SB2023060816
and 16 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708		 CWE-614 Low
No
No
 1.14.1 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU73175 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31159		 CWE-22 Medium
No
No
 1.13.1 08.03.2023 SB2023030823
SB2023030915
SB2023042635
and 15 more
#VU72123 - Deserialization of Untrusted Data
CVE-2023-25194		 CWE-502 Low
Available
No
 1.14.2 11.02.2023 SB2023021101
SB2023030952
SB2023040419
and 40 more
#VU62060 - Stack-based buffer overflow
CVE-2022-24197		 CWE-121 Medium
No
No
 1.14.2 11.04.2022 SB2022020182
SB2023100939
#VU62059 - Allocation of Resources Without Limits or Throttling
CVE-2022-24196		 CWE-770 Medium
No
No
 1.14.2 11.04.2022 SB2022020182
SB2023100938
#VU52986 - Incorrect Regular Expression
CVE-2021-28092		 CWE-185 Low
No
No
 1.12.0.4 10.05.2021 SB2021051003
SB2021051004
SB2023092211
and 1 more


Showing elements 161 - 180 out of 318