Known vulnerabilities in IBM Security Identity Manager Virtual Appliance

Vendor: IBM Corporation
Software: IBM Security Identity Manager Virtual Appliance
Software CPE: cpe:2.3:o:ibm_corporation:ibm_security_identity_manager_virtual_appliance:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 17
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Identity Manager Virtual Appliance IBM Security Identity Manager Virtual Appliance is affected by 17 known vulnerabilities: 3 high, 6 medium, 8 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 - 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU59281 - Resource exhaustion
CVE-2021-38951		 CWE-400 High
No
No
 - 06.01.2022 SB2022010631
SB2022010632
SB2022021421
and 2 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 - 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Available
Exploited
 - 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU58844 - Heap-based Buffer Overflow
CVE-2021-4101		 CWE-122 High
No
No
 - 13.12.2021 SB2021121401
SB2021121518
SB2022011730
and 9 more
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550		 CWE-300 Medium
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU57495 - Improper input validation
CVE-2021-35578		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 95 more
#VU57496 - Improper input validation
CVE-2021-35603		 CWE-20 Low
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 112 more
#VU47777 - Missing Encryption of Sensitive Data
CVE-2020-14781		 CWE-311 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 48 more
#VU47778 - Improper input validation
CVE-2020-14782		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 52 more
#VU25879 - Memory corruption
CVE-2020-0778		 CWE-119 Low
No
No
 - 10.03.2020 SB2020031016
SB2022061412
SB2022103134
#VU14025 - Unrestricted Upload of File with Dangerous Type
CVE-2018-1453		 CWE-434 Low
No
No
 7.0.1.7 27.07.2018 SB2018072701
#VU119 - Improper input validation
CVE-2016-0357		 CWE-20 Low
No
No
 - 11.07.2016 SB2016071115
#VU118 - Improper Authentication
CVE-2016-0340		 CWE-287 Low
No
No
 - 11.07.2016 SB2016071114
#VU117 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2016-0339		 CWE-451 Medium
No
No
 - 11.07.2016 SB2016071113
#VU116 - Permissions, Privileges, and Access Controls
CVE-2016-0338		 CWE-264 Medium
No
No
 - 11.07.2016 SB2016071112
#VU115 - Permissions, Privileges, and Access Controls
CVE-2016-0330		 CWE-264 Low
No
No
 - 11.07.2016 SB2016071111