Known vulnerabilities in IBM Security SiteProtector System

Vendor: IBM Corporation
Software: IBM Security SiteProtector System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_siteprotector_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 21
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security SiteProtector System IBM Security SiteProtector System is affected by 21 known vulnerabilities: 1 critical, 2 high, 13 medium, 5 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68718 - Use After Free
CVE-2022-43680		 CWE-416 Medium
No
No
 3.1.1.20 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU65129 - Unprotected Storage of Credentials
CVE-2020-4138		 CWE-256 Low
No
No
 3.1.1.24 12.07.2022 SB2022071212
#VU65128 - Use of Hard-coded Credentials
CVE-2020-4150		 CWE-798 Medium
No
No
 3.1.1.24 12.07.2022 SB2022071212
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 3.1.1.19 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64088 - Out-of-bounds read
CVE-2022-30556		 CWE-125 Medium
No
No
 3.1.1.19 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 31 more
#VU64085 - Improper input validation
CVE-2022-29404		 CWE-20 Medium
No
No
 3.1.1.19 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 30 more
#VU64083 - Out-of-bounds read
CVE-2022-28615		 CWE-125 Low
No
No
 3.1.1.19 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 41 more
#VU64081 - Out-of-bounds read
CVE-2022-28614		 CWE-125 Low
No
No
 3.1.1.19 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 36 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377		 CWE-444 Medium
Available
No
 3.1.1.19 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU61287 - Improper input validation
CVE-2022-22719		 CWE-20 Medium
No
No
 3.1.1.18 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 32 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 3.1.1.18 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61285 - Integer overflow
CVE-2022-22721		 CWE-190 High
No
No
 3.1.1.18 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 39 more
#VU59057 - Server-Side Request Forgery (SSRF)
CVE-2021-44224		 CWE-918 Medium
No
No
 3.1.1.18 20.12.2021 SB2021122005
SB2021122021
SB2021122709
and 33 more
#VU59056 - Memory corruption
CVE-2021-44790		 CWE-119 Critical
Available
No
 3.1.1.18 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798		 CWE-476 Medium
No
No
 3.1.1.17 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56679 - Memory corruption
CVE-2021-39275		 CWE-119 Medium
No
No
 3.1.1.17 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU53779 - Improper Privilege Management
CVE-2020-13938		 CWE-269 Low
No
No
 3.1.1.16 03.06.2021 SB2021060320
SB2021060321
SB2021071308
and 5 more
#VU53774 - Improper input validation
CVE-2021-30641		 CWE-20 Medium
No
No
 3.1.1.16 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 20 more
#VU7242 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-9233		 CWE-611 Low
No
No
 3.1.1.20 25.06.2017 SB2017062501
SB2017062610
SB2017062502
and 16 more
#VU42119 - Resource exhaustion
CVE-2013-0340		 CWE-400 Medium
No
No
 3.1.1.20 21.01.2014 SB2014012103
SB2017011129
SB2021052301
and 16 more


Showing elements 1 - 20 out of 21