Known vulnerabilities in IBM Security SOAR - page 2

Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_soar:*:*:*:*:*:*:*:*
Total vulnerabilities: 136
Public exploits: 14
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security SOAR IBM Security SOAR is affected by 136 known vulnerabilities: 1 critical, 11 high, 83 medium, 41 low Critical High Medium Low

Vulnerabilities (136)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125981 - Exposure of sensitive information to an unauthorized actor
CVE-2026-40895
CWE-200 Medium
No
No
51.0.10.1 14.04.2026 SB20260414106
SB2026062434
SB20260625284
and 15 more
#VU125804 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-2950
CWE-1321 Medium
No
No
51.0.10.0 10.04.2026 SB2026041094
SB2026042049
SB2026042720
and 14 more
#VU125803 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-4800
CWE-94 High
No
No
51.0.10.0 10.04.2026 SB2026041094
SB20260410101
SB20260410102
and 62 more
#VU125750 - Server-Side Request Forgery (SSRF)
CVE-2025-62718
CWE-918 High
No
No
51.0.10.0 10.04.2026 SB2026041001
SB2026050419
SB2026050715
and 30 more
#VU124874 - Insufficient Verification of Data Authenticity
CVE-2026-26007
CWE-345 Medium
No
No
51.0.9.2 06.04.2026 SB2026040616
SB2026040617
SB2026040618
and 30 more
#VU123432 - Uncontrolled Recursion
CVE-2026-27601
CWE-674 Medium
No
No
51.0.9.2 03.03.2026 SB2026030327
SB2026031519
SB2026031520
and 9 more
#VU123159 - Incorrect Calculation of Buffer Size
CVE-2026-1188
CWE-131 High
No
No
51.0.9.0 24.02.2026 SB2026022412
SB2026022413
SB2026022531
and 46 more
#VU123140 - Inefficient Regular Expression Complexity
CVE-2026-26996
CWE-1333 Medium
No
No
51.0.9.1 23.02.2026 SB2026022345
SB2026030633
SB2026032328
and 33 more
#VU122452 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-25639
CWE-754 Medium
Available
No
51.0.9.1 09.02.2026 SB2026020914
SB2026022201
SB2026022202
and 23 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465
CWE-1321 Medium
No
No
51.0.9.0 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 69 more
#VU117483 - Improper input validation
CVE-2025-53066
CWE-20 Medium
No
No
51.0.8.1 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057
CWE-20 Medium
No
No
51.0.8.1 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU117335 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-1647
CWE-79 Medium
No
No
51.0.7.1 17.10.2025 SB2025101709
SB2025112023
SB2026062237
and 1 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889
CWE-1333 Low
No
No
51.0.7.1 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 33 more
#VU101827 - Security Features
CVE-2024-11079
CWE-254 High
No
No
51.0.10.0 18.12.2024 SB2024121821
SB2024121823
SB2024121824
and 5 more
#VU100999 - Information Exposure Through Log Files
CVE-2024-8775
CWE-532 Low
No
No
51.0.10.0 27.11.2024 SB2024112745
SB2024112746
SB2024120371
and 14 more
#VU100998 - Incorrect Authorization
CVE-2024-9902
CWE-863 Low
No
No
51.0.10.0 27.11.2024 SB2024112745
SB2024112746
SB2024120371
and 15 more
#VU97688 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6485
CWE-79 Medium
No
No
51.0.7.1 25.09.2024 SB2024092512
SB20241230139
SB2025060920
and 4 more
#VU97687 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6484
CWE-79 Medium
No
No
51.0.7.1 25.09.2024 SB2024092512
SB20241230139
SB2025060920
and 3 more
#VU53202 - Command injection
CVE-2021-23337
CWE-77 Medium
No
No
51.0.10.0 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 59 more


Showing elements 21 - 40 out of 136