Known vulnerabilities in IBM Security Verify Governance - page 14

Vendor: IBM Corporation
Software: IBM Security Verify Governance
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_verify_governance:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 633
Public exploits: 53
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Governance IBM Security Verify Governance is affected by 633 known vulnerabilities: 2 critical, 117 high, 253 medium, 261 low Critical High Medium Low

Vulnerabilities (633)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89343 - Resource exhaustion
CVE-2023-38264		 CWE-400 Medium
No
No
 10.0.2.0.3 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU88665 - Improper input validation
CVE-2024-21085		 CWE-20 Low
No
No
 10.0.2.0.3 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88666 - Improper input validation
CVE-2024-21011		 CWE-20 Low
No
No
 10.0.2.0.3 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259		 CWE-918 Medium
No
No
 10.0.2.0.3 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU86988 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50312		 CWE-327 Low
No
No
 10.0.2.0.3 04.03.2024 SB2024030425
SB2024031819
SB2024032049
and 49 more
#VU86983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-1597		 CWE-89 High
No
No
 10.0.2.0.3 04.03.2024 SB2024030405
SB2024030406
SB2024030427
and 47 more
#VU83625 - XML Injection
CVE-2023-49093		 CWE-91 Medium
No
No
 10.0.2.0.3 03.12.2023 SB2023120301
SB2024011682
SB2024082012
#VU83582 - Improper input validation
CVE-2023-34053		 CWE-20 Medium
No
No
 10.0.2.0.3 29.11.2023 SB2023112966
SB2023112967
SB2024011661
and 13 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 10.0.2.0.3 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU74271 - Resource exhaustion
CVE-2012-2098		 CWE-400 Medium
No
No
 10.0.2.0.3 31.03.2023 SB2012062904
SB2023040315
SB2023040465
and 10 more
#VU66748 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-5259		 CWE-94 Medium
No
No
 10.0.2.0.3 24.08.2022 SB20200310151
SB2022082433
SB2023031611
and 8 more
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813		 CWE-611 Medium
No
No
 10.0.2.0.3 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more
#VU61669 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0155		 CWE-200 Low
No
No
 10.0.2.0.3 28.03.2022 SB2022032840
SB2022032843
SB2022071505
and 32 more
#VU54856 - Resource exhaustion
CVE-2021-36374		 CWE-400 Medium
No
No
 10.0.2.0.3 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 43 more
#VU54855 - Resource exhaustion
CVE-2021-36373		 CWE-400 Medium
No
No
 10.0.2.0.3 14.07.2021 SB2021071409
SB2021072011
SB2022080830
and 16 more
#VU29228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4051		 CWE-79 Low
No
No
 10.0.2.0.3 24.06.2020 SB2020062408
SB2022082433
SB2022120724
and 7 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 10.0.2.0.3 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979		 CWE-264 Low
No
No
 10.0.2.0.3 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more
#VU25348 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10785		 CWE-79 Low
No
No
 10.0.2.0.3 14.02.2020 SB2020021405
SB2022082433
SB2023040530
and 7 more
#VU36773 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2018-15494		 CWE-74 High
No
No
 10.0.2.0.3 18.08.2018 SB2018081804
SB2022070505
SB2022082433
and 11 more


Showing elements 261 - 280 out of 633