Known vulnerabilities in IBM Security Risk Manager

Vendor: IBM Corporation
Software: IBM Security Risk Manager
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_risk_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 11
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Risk Manager IBM Security Risk Manager is affected by 11 known vulnerabilities: 7 medium, 4 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67492 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-29912		 CWE-79 Medium
No
No
 1.7.2.0 20.09.2022 SB2022092025
#VU67187 - Cleartext Storage of Sensitive Information
CVE-2021-38911		 CWE-312 Low
No
No
 1.8.0.0 12.09.2022 SB2022091223
#VU63702 - Allocation of Resources Without Limits or Throttling
CVE-2020-15168		 CWE-770 Medium
No
No
 1.7.2.0 26.05.2022 SB2020091032
SB2022052615
SB2022060618
and 12 more
#VU54080 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-31812		 CWE-835 Medium
No
No
 1.8.0.0 13.06.2021 SB2021061308
SB2021100412
SB2022020119
and 17 more
#VU54079 - Resource exhaustion
CVE-2021-31811		 CWE-400 Medium
No
No
 1.8.0.0 13.06.2021 SB2021061308
SB2021100412
SB2022081905
and 7 more
#VU53672 - Permissions, Privileges, and Access Controls
CVE-2021-22118		 CWE-264 Low
No
No
 1.8.0.0 31.05.2021 SB2021053107
SB2021072775
SB2021072776
and 21 more
#VU51606 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-27807		 CWE-835 Medium
No
No
 1.8.0.0 22.03.2021 SB2021032216
SB2021072779
SB2022090818
and 7 more
#VU51605 - Resource exhaustion
CVE-2021-27906		 CWE-400 Medium
No
No
 1.8.0.0 22.03.2021 SB2021032216
SB2021072142
SB2021072738
and 7 more
#VU49739 - Improper input validation
CVE-2020-5421		 CWE-20 Medium
Available
No
 1.8.0.0 20.01.2021 SB2021012002
SB2021012008
SB2021012015
and 39 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 1.8.0.0 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU49330 - Insecure Temporary File
CVE-2020-15250		 CWE-377 Low
No
No
 1.8.0.0 12.10.2020 SB2020101219
SB2021010712
SB2020110317
and 25 more