Known vulnerabilities in IBM Security Verify Governance - page 13

Vendor: IBM Corporation
Software: IBM Security Verify Governance
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_verify_governance:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 633
Public exploits: 53
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Governance IBM Security Verify Governance is affected by 633 known vulnerabilities: 2 critical, 117 high, 253 medium, 261 low Critical High Medium Low

Vulnerabilities (633)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88668 - Improper input validation
CVE-2024-21094		 CWE-20 Low
No
No
 10.0.2.0.3 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more
#VU88532 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-29041		 CWE-601 Medium
No
No
 10.0.2.0.3 15.04.2024 SB2024041530
SB2024041532
SB2024042918
and 44 more
#VU80794 - Use After Free
CVE-2022-40133		 CWE-416 Low
No
No
 10.0.2.0.4 14.09.2023 SB2023091441
SB2023091457
SB2023091849
and 30 more
#VU80790 - Use After Free
CVE-2022-38457		 CWE-416 Low
No
No
 10.0.2.0.4 14.09.2023 SB2023091437
SB2023091457
SB2023091849
and 29 more
#VU79262 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2022-40982		 CWE-1342 Medium
No
No
 10.0.2.0.4 08.08.2023 SB20230808144
SB2023081009
SB2023081143
and 113 more
#VU76223 - NULL Pointer Dereference
CVE-2023-0458		 CWE-476 Low
No
No
 10.0.2.0.4 16.05.2023 SB20230516115
SB20230516119
SB2023051856
and 44 more
#VU75338 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-45887		 CWE-362 Low
No
No
 10.0.2.0.4 19.04.2023 SB2023041922
SB2023042426
SB2023061420
and 49 more
#VU74124 - Missing release of memory after effective lifetime
CVE-2023-1074		 CWE-401 Low
No
No
 10.0.2.0.4 28.03.2023 SB2023032820
SB2023032832
SB2023040662
and 54 more
#VU74053 - Double Free
CVE-2022-4744		 CWE-415 Low
No
No
 10.0.2.0.4 27.03.2023 SB2023032732
SB2023032734
SB2023032735
and 52 more
#VU73765 - Missing release of memory after effective lifetime
CVE-2023-0597		 CWE-401 Low
No
No
 10.0.2.0.4 16.03.2023 SB2023031648
SB2023031652
SB2023031653
and 69 more
#VU72700 - Type confusion
CVE-2023-1075		 CWE-843 Low
No
No
 10.0.2.0.4 01.03.2023 SB2023030154
SB2023032832
SB2023032843
and 49 more
#VU72098 - Use After Free
CVE-2023-0590		 CWE-416 Low
No
No
 10.0.2.0.4 09.02.2023 SB2023020962
SB2023020963
SB2023020964
and 80 more
#VU72088 - Out-of-bounds read
CVE-2022-41862		 CWE-125 Medium
No
No
 10.0.2.0.3 09.02.2023 SB2023020953
SB2023021334
SB2023021335
and 47 more
#VU70502 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-45869		 CWE-362 Medium
No
No
 10.0.2.0.4 27.12.2022 SB2022122720
SB2022122724
SB2022122725
and 30 more
#VU70463 - Use After Free
CVE-2022-3640		 CWE-416 Medium
No
No
 10.0.2.0.4 21.12.2022 SB2022122142
SB2022122145
SB2022122147
and 58 more
#VU69796 - Access of Uninitialized Pointer
CVE-2022-42895		 CWE-824 Low
No
No
 10.0.2.0.4 01.12.2022 SB2022120128
SB2022120150
SB2022121445
and 67 more
#VU69707 - Information Exposure Through Log Files
CVE-2022-3594		 CWE-532 Low
No
No
 10.0.2.0.4 29.11.2022 SB2022112975
SB2022113032
SB2022113033
and 63 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160		 CWE-79 Low
No
No
 10.0.2.0.3 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU63160 - Double Free
CVE-2022-28388		 CWE-415 Low
No
No
 10.0.2.0.4 13.05.2022 SB2022051312
SB2022051712
SB2022060826
and 52 more
#VU62485 - Out-of-bounds write
CVE-2021-43975		 CWE-787 Low
No
No
 10.0.2.0.4 21.04.2022 SB2022042147
SB2022042151
SB2022021818
and 28 more


Showing elements 241 - 260 out of 633