Known vulnerabilities in IBM Security SOAR - page 7

Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_soar:*:*:*:*:*:*:*:*
Total vulnerabilities: 136
Public exploits: 14
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security SOAR IBM Security SOAR is affected by 136 known vulnerabilities: 1 critical, 11 high, 83 medium, 41 low Critical High Medium Low

Vulnerabilities (136)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62401 - Improper input validation
CVE-2022-21434
CWE-20 Medium
No
No
45.2 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 111 more
#VU62402 - Improper input validation
CVE-2022-21443
CWE-20 Low
No
No
45.2 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 109 more
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-0391
CWE-93 Medium
No
No
45.0 29.03.2022 SB2022032903
SB2022032905
SB2022032907
and 49 more
#VU59953 - Exposure of sensitive information to an unauthorized actor
CVE-2021-29785
CWE-200 Medium
No
No
43.1 24.01.2022 SB2022012408
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105
CWE-835 Medium
Available
No
42.2.41, 43.0.7662 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046
CWE-94 High
Available
Exploited
42.2.41, 43.0.7662 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU58272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41182
CWE-79 Medium
No
No
44.0 20.11.2021 SB2021112002
SB2022011944
SB2022011946
and 32 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184
CWE-79 Medium
Available
No
44.0 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU58270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41183
CWE-79 Medium
No
No
44.0 20.11.2021 SB2021112002
SB2022011943
SB2022011944
and 33 more
#VU57485 - Improper input validation
CVE-2021-35560
CWE-20 Medium
No
No
44.0 19.10.2021 SB2021101940
SB2022020177
SB2022021424
and 28 more
#VU57490 - Improper input validation
CVE-2021-35564
CWE-20 Medium
No
No
44.0 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 86 more
#VU57494 - Improper input validation
CVE-2021-35565
CWE-20 Medium
No
No
44.0 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 78 more
#VU57495 - Improper input validation
CVE-2021-35578
CWE-20 Medium
No
No
44.0 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 95 more
#VU57497 - Improper input validation
CVE-2021-35588
CWE-20 Low
No
No
44.0 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 52 more
#VU51712 - Improper preservation of permissions
CVE-2021-22137
CWE-281 Low
No
No
42.0.7058 25.03.2021 SB2021032502
SB2021092812
SB2022072066
and 2 more
#VU51710 - Permissions, Privileges, and Access Controls
CVE-2021-22135
CWE-264 Low
No
No
42.0.7058 25.03.2021 SB2021032502
SB2021092812
SB2022072066
and 1 more


Showing elements 121 - 140 out of 136