Known vulnerabilities in IBM SANnav Management Portal

Vendor: IBM Corporation
Software: IBM SANnav Management Portal
Software CPE: cpe:2.3:a:ibm_corporation:ibm_sannav_management_portal:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 21
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM SANnav Management Portal IBM SANnav Management Portal is affected by 21 known vulnerabilities: 1 high, 13 medium, 7 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 2.3.0a, 2.3.1 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 2.3.0a, 2.3.1 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU75264 - Improper input validation
CVE-2023-21939		 CWE-20 Medium
Available
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75265 - Improper input validation
CVE-2023-21938		 CWE-20 Low
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968		 CWE-20 Low
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937		 CWE-20 Low
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75261 - Improper input validation
CVE-2023-21967		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU75262 - Improper input validation
CVE-2023-21954		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU65496 - Improper input validation
CVE-2022-21541		 CWE-20 Medium
No
No
 2.2.2 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 105 more
#VU65497 - Improper input validation
CVE-2022-21540		 CWE-20 Medium
No
No
 2.2.2 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 105 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097		 CWE-311 Low
No
No
 2.2.0.2, 2.2.1 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068		 CWE-78 Medium
No
No
 2.3.0 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU62400 - Improper input validation
CVE-2022-21496		 CWE-20 Medium
No
No
 2.2.2 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 118 more
#VU62401 - Improper input validation
CVE-2022-21434		 CWE-20 Medium
No
No
 2.2.2 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 111 more
#VU62402 - Improper input validation
CVE-2022-21443		 CWE-20 Low
No
No
 2.2.2 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 109 more
#VU59727 - Improper input validation
CVE-2022-21299		 CWE-20 Medium
No
No
 2.2.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 105 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 - 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU57493 - Improper input validation
CVE-2021-35561		 CWE-20 Medium
No
No
 2.2.1 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 94 more
#VU52449 - Improper input validation
CVE-2021-2163		 CWE-20 Medium
No
No
 2.2.2 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more


Showing elements 1 - 20 out of 21