Known vulnerabilities in IBM Security Verify Governance - page 22

Vendor: IBM Corporation
Software: IBM Security Verify Governance
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_verify_governance:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 633
Public exploits: 53
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Governance IBM Security Verify Governance is affected by 633 known vulnerabilities: 2 critical, 117 high, 253 medium, 261 low Critical High Medium Low

Vulnerabilities (633)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82350 - Resource Management Errors
CVE-2023-46158		 CWE-399 Medium
No
No
 10.0.2.0.1 24.10.2023 SB2023102444
SB2023120144
SB2023122104
and 30 more
#VU81722 - Resource exhaustion
CVE-2023-30991		 CWE-400 Medium
No
No
 - 10.10.2023 SB2023101014
SB2023103131
SB2023110304
and 9 more
#VU76906 - Out-of-bounds read
CVE-2023-2597		 CWE-125 High
No
No
 - 05.06.2023 SB2023060525
SB2023060705
SB2023060930
and 86 more
#VU75265 - Improper input validation
CVE-2023-21938		 CWE-20 Low
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968		 CWE-20 Low
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937		 CWE-20 Low
No
No
 - 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU71754 - Integer overflow
CVE-2022-25147		 CWE-190 High
No
No
 10.0.2.0.1 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 47 more
#VU66429 - Permissions, Privileges, and Access Controls
CVE-2022-2625		 CWE-264 Low
No
No
 10.0.2.0.1 12.08.2022 SB2022081212
SB2022081848
SB2022082547
and 40 more
#VU66397 - Double Free
CVE-2022-2588		 CWE-415 Low
Available
Exploited
 10.0.2.0.1 11.08.2022 SB2022081109
SB2022081110
SB2022081111
and 99 more
#VU63126 - Permissions, Privileges, and Access Controls
CVE-2022-1552		 CWE-264 Medium
No
No
 10.0.2.0.1 12.05.2022 SB2022051213
SB2022051303
SB2022051304
and 48 more
#VU58272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41182		 CWE-79 Medium
No
No
 10.0.2.0.1 20.11.2021 SB2021112002
SB2022011944
SB2022011946
and 32 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 10.0.2.0.1 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU58270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41183		 CWE-79 Medium
No
No
 10.0.2.0.1 20.11.2021 SB2021112002
SB2022011943
SB2022011944
and 33 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 10.0.2.0.1 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU21707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10735		 CWE-79 Low
No
No
 10.0.2.0.1 10.10.2019 SB2019010911
SB2019101009
SB2020093090
and 21 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 10.0.2.0.1 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU16542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20677		 CWE-79 Low
No
No
 10.0.2.0.1 14.12.2018 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251		 CWE-79 Low
No
No
 10.0.2.0.1 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more
#VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14042		 CWE-79 Low
No
No
 10.0.2.0.1 18.07.2018 SB2018071803
SB2020093090
SB2020110508
and 22 more
#VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14040		 CWE-79 Low
No
No
 10.0.2.0.1 17.07.2018 SB2018071803
SB2019031501
SB2020093090
and 24 more


Showing elements 421 - 440 out of 633