Known vulnerabilities in IBM Security SOAR 40.2 HotFix 1

Version: 40.2 HotFix 1
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_soar:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Security SOAR version 40.2 HotFix 1 IBM Security SOAR 40.2 HotFix 1 is affected by 5 vulnerabilities: 1 high, 2 medium, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-0391
CWE-93 Medium
No
No
45.0 29.03.2022 SB2022032903
SB2022032905
SB2022032907
and 49 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105
CWE-835 Medium
Public exploit available
No
42.2.41, 43.0.7662 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046
CWE-94 High
Public exploit available
Exploited
42.2.41, 43.0.7662 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU51712 - Improper preservation of permissions
CVE-2021-22137
CWE-281 Low
No
No
42.0.7058 25.03.2021 SB2021032502
SB2021092812
SB2022072066
and 2 more
#VU51710 - Permissions, Privileges, and Access Controls
CVE-2021-22135
CWE-264 Low
No
No
42.0.7058 25.03.2021 SB2021032502
SB2021092812
SB2022072066
and 1 more