Known vulnerabilities in IBM Security SOAR - page 3

Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_soar:*:*:*:*:*:*:*:*
Total vulnerabilities: 136
Public exploits: 14
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security SOAR IBM Security SOAR is affected by 136 known vulnerabilities: 1 critical, 11 high, 83 medium, 41 low Critical High Medium Low

Vulnerabilities (136)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754
CWE-770 Medium
Available
No
51.0.7.2 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783
CWE-330 Medium
Available
No
51.0.7.1 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more
#VU112940 - Improper input validation
CVE-2025-30761
CWE-20 Medium
No
No
51.0.7.1 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 77 more
#VU112941 - Improper input validation
CVE-2025-30754
CWE-20 Medium
No
No
51.0.7.1 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112937 - Improper input validation
CVE-2025-30749
CWE-20 High
No
No
51.0.7.1 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106
CWE-20 High
No
No
51.0.7.1 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU112132 - Stack-based buffer overflow
CVE-2025-4447
CWE-121 Medium
No
No
51.0.6.1 03.07.2025 SB2025070315
SB2025070316
SB2025070319
and 54 more
#VU107520 - Improper input validation
CVE-2025-21587
CWE-20 Medium
No
No
51.0.6.1 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 103 more
#VU107521 - Improper input validation
CVE-2025-30698
CWE-20 Medium
No
No
51.0.6.1 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 93 more
#VU107489 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-53382
CWE-94 Low
No
No
- 16.04.2025 SB2025041637
SB2025041638
SB2025043033
and 8 more
#VU105984 - Inefficient Regular Expression Complexity
CVE-2025-27789
CWE-1333 Low
No
No
- 24.03.2025 SB2025032476
SB2025041020
SB2025041691
and 45 more
#VU105862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-57965
CWE-79 Medium
No
No
- 19.03.2025 SB2025031916
SB2025031918
SB2025050262
and 14 more
#VU105452 - Server-Side Request Forgery (SSRF)
CVE-2025-27152
CWE-918 Medium
Available
No
- 07.03.2025 SB2025030777
SB2025031918
SB2025032417
and 42 more
#VU101344 - Integer overflow
CVE-2024-10917
CWE-190 Low
No
No
51.0.5.0 09.12.2024 SB2024120927
SB2024120928
SB2024120929
and 66 more
#VU100588 - Improper Authentication
CVE-2024-52316
CWE-287 Low
No
No
51.0.4.1 18.11.2024 SB2024111823
SB2024112550
SB2024112832
and 36 more
#VU100587 - Resource Management Errors
CVE-2024-52317
CWE-399 Medium
Available
No
51.0.4.1 18.11.2024 SB2024111823
SB2024112550
SB2024121231
and 27 more
#VU98644 - Improper input validation
CVE-2024-21235
CWE-20 Medium
No
No
51.0.5.0 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98645 - Improper input validation
CVE-2024-21210
CWE-20 Low
No
No
51.0.5.0 15.10.2024 SB20241015215
SB2024101668
SB2024101672
and 122 more
#VU98647 - Improper input validation
CVE-2024-21208
CWE-20 Low
No
No
51.0.5.0 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98648 - Improper input validation
CVE-2024-21217
CWE-20 Low
No
No
51.0.5.0 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more


Showing elements 41 - 60 out of 136