Known vulnerabilities in IBM Security Verify Governance - page 24

Vendor: IBM Corporation
Software: IBM Security Verify Governance
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_verify_governance:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 633
Public exploits: 53
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Governance IBM Security Verify Governance is affected by 633 known vulnerabilities: 2 critical, 117 high, 253 medium, 261 low Critical High Medium Low

Vulnerabilities (633)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83422 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-22462		 CWE-327 Medium
No
No
 10.0.1.0.3 22.11.2023 SB2023112221
#VU82555 - Improper input validation
CVE-2021-33609		 CWE-20 Low
No
No
 10.0.1.0.4 30.10.2023 SB2023103018
#VU81287 - Observable discrepancy
CVE-2021-31403		 CWE-203 Low
No
No
 10.0.1.0.4 29.09.2023 SB2023092932
#VU77779 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-26119		 CWE-94 High
No
No
 10.0.1.0.5 28.06.2023 SB2023062860
SB2023063004
SB2023071994
and 1 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 10.0.2.0.1 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU76022 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-27554		 CWE-611 Medium
No
No
 10.0.1.0.5 11.05.2023 SB2023051112
SB2023051523
SB2023051524
and 5 more
#VU75686 - Improper Validation of Certificate with Host Mismatch
CVE-2022-39161		 CWE-297 Low
No
No
 10.0.1.0.5 03.05.2023 SB2023050303
SB2023050304
SB2023063008
and 7 more
#VU75493 - Permissions, Privileges, and Access Controls
CVE-2023-29257		 CWE-264 Low
No
No
 - 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 8 more
#VU73951 - Deserialization of Untrusted Data
CVE-2021-39148		 CWE-502 High
No
No
 10.0.1.0.2 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 10.0.1.0.5 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU69545 - Incorrect Default Permissions
CVE-2022-41946		 CWE-276 Low
No
No
 10.0.1.0.5 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU64079 - Missing release of memory after effective lifetime
CVE-2022-1012		 CWE-401 Medium
No
No
 10.0.1.0.5 08.06.2022 SB2022060827
SB2022061417
SB2022062437
and 75 more
#VU60527 - Resource exhaustion
CVE-2021-43859		 CWE-400 Medium
No
No
 10.0.1.0.2 11.02.2022 SB2022021102
SB2022021103
SB2022042250
and 26 more
#VU54394 - Incorrect Regular Expression
CVE-2020-28500		 CWE-185 Medium
No
No
 10.0.1.0.5 27.06.2021 SB2021062702
SB2021062703
SB2021090905
and 30 more
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 10.0.1.0.5 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 59 more
#VU41989 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8203		 CWE-94 Medium
No
No
 10.0.1.0.5 10.08.2020 SB2020071548
SB2020122111
SB2021042308
and 31 more
#VU21764 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-10744		 CWE-94 Medium
No
No
 10.0.1.0.5 14.10.2019 SB2019072612
SB2021012219
SB2022061803
and 14 more
#VU19305 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-16487		 CWE-94 High
No
No
 10.0.1.0.5 22.07.2019 SB2019020111
SB2022062806
SB2022101801
and 13 more
#VU19282 - Resource exhaustion
CVE-2019-1010266		 CWE-400 Medium
No
No
 10.0.1.0.5 22.07.2019 SB2019020111
SB2022062806
SB2022101801
and 8 more
#VU37072 - Improper input validation
CVE-2018-3721		 CWE-20 Medium
No
No
 10.0.1.0.5 07.06.2018 SB2018060730
SB2022062806
SB2022101801
and 7 more


Showing elements 461 - 480 out of 633