Known vulnerabilities in IBM Security SOAR - page 4

Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_soar:*:*:*:*:*:*:*:*
Total vulnerabilities: 136
Public exploits: 14
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security SOAR IBM Security SOAR is affected by 136 known vulnerabilities: 1 critical, 11 high, 83 medium, 41 low Critical High Medium Low

Vulnerabilities (136)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100591 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-52318
CWE-79 Medium
No
No
51.0.4.1 18.11.2024 SB2024111830
SB2024112250
SB2024112251
and 17 more
#VU98760 - Improper input validation
CVE-2024-47764
CWE-20 Low
No
No
51.0.4.1 17.10.2024 SB2024101722
SB20241022349
SB2024103080
and 35 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296
CWE-1333 Low
No
No
51.0.4.0 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU98126 - Weak password recovery mechanism
CVE-2024-45670
CWE-640 Medium
No
No
51.0.2.0 08.10.2024 SB2024100816
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801
CWE-1321 Medium
No
No
51.0.4.0 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU97226 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-27267
CWE-362 Medium
No
No
51.0.3.1 12.09.2024 SB2024091291
SB2024091292
SB2024091618
and 57 more
#VU96744 - Type confusion
CVE-2024-6119
CWE-843 Medium
No
No
51.0.4.1 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU95168 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-38319
CWE-94 Low
No
No
51.0.2.1 02.08.2024 SB2024080230
#VU95145 - Cleartext Storage of Sensitive Information
CVE-2024-23444
CWE-312 Low
No
No
51.0.4.0 01.08.2024 SB2024080141
SB2024112711
SB2024112732
and 6 more
#VU94555 - Improper input validation
CVE-2024-21147
CWE-20 Medium
No
No
51.0.3.1 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU94556 - Improper input validation
CVE-2024-21145
CWE-20 Medium
No
No
51.0.3.1 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU94557 - Improper input validation
CVE-2024-21140
CWE-20 Medium
No
No
51.0.3.1 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 119 more
#VU94558 - Improper input validation
CVE-2024-21144
CWE-20 Low
No
No
51.0.3.1 18.07.2024 SB20240718154
SB20240718155
SB20240718192
and 114 more
#VU94559 - Improper input validation
CVE-2024-21131
CWE-20 Low
No
No
51.0.3.1 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU94560 - Improper input validation
CVE-2024-21138
CWE-20 Low
No
No
51.0.3.1 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 117 more
#VU93732 - Resource Management Errors
CVE-2024-34750
CWE-399 Medium
No
No
51.0.3.0 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU89343 - Resource exhaustion
CVE-2023-38264
CWE-400 Medium
No
No
51.0.2.2 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU88665 - Improper input validation
CVE-2024-21085
CWE-20 Low
No
No
51.0.2.2 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88666 - Improper input validation
CVE-2024-21011
CWE-20 Low
No
No
51.0.2.2 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88668 - Improper input validation
CVE-2024-21094
CWE-20 Low
No
No
51.0.2.2 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more


Showing elements 61 - 80 out of 136