Known vulnerabilities in IBM Security Verify Governance - page 25

Vendor: IBM Corporation
Software: IBM Security Verify Governance
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_verify_governance:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 633
Public exploits: 53
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Governance IBM Security Verify Governance is affected by 633 known vulnerabilities: 2 critical, 117 high, 253 medium, 261 low Critical High Medium Low

Vulnerabilities (633)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73956 - Server-Side Request Forgery (SSRF)
CVE-2021-39152		 CWE-918 High
Available
No
 10.0.1.0.2 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73955 - Server-Side Request Forgery (SSRF)
CVE-2021-39150		 CWE-918 High
Available
No
 10.0.1.0.2 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73953 - Deserialization of Untrusted Data
CVE-2021-39149		 CWE-502 High
No
No
 10.0.1.0.2 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73950 - Deserialization of Untrusted Data
CVE-2021-39147		 CWE-502 High
No
No
 10.0.1.0.2 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73949 - Deserialization of Untrusted Data
CVE-2021-39146		 CWE-502 High
No
No
 10.0.1.0.2 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73948 - Deserialization of Untrusted Data
CVE-2021-39145		 CWE-502 High
No
No
 10.0.1.0.2 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 14 more
#VU68720 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-39144		 CWE-94 Critical
Available
Exploited
 10.0.1.0.2 25.10.2022 SB2021082322
SB2022102568
SB2023031801
and 17 more
#VU62511 - Improper input validation
CVE-2021-39140		 CWE-20 Medium
No
No
 10.0.1.0.2 22.04.2022 SB2022042257
SB2023012518
SB2023032239
and 15 more
#VU59813 - Improper input validation
CVE-2021-39139		 CWE-20 High
No
No
 10.0.1.0.2 19.01.2022 SB2022011911
SB2022011912
SB2022012325
and 21 more
#VU59701 - Improper input validation
CVE-2021-39154		 CWE-20 High
No
No
 10.0.1.0.2 18.01.2022 SB2022011835
SB2023032239
SB2023050815
and 12 more
#VU54675 - Deserialization of Untrusted Data
CVE-2021-29505		 CWE-502 Medium
Available
No
 10.0.1.0.2 12.07.2021 SB2021071217
SB2021071218
SB2021071389
and 19 more
#VU52572 - Deserialization of Untrusted Data
CVE-2021-21349		 CWE-502 Medium
Available
No
 10.0.1.0.2 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 16 more
#VU52571 - Deserialization of Untrusted Data
CVE-2021-21351		 CWE-502 High
No
No
 10.0.1.0.2 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 19 more
#VU52570 - Resource exhaustion
CVE-2021-21341		 CWE-400 Medium
No
No
 10.0.1.0.2 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 16 more
#VU52565 - Deserialization of Untrusted Data
CVE-2021-21350		 CWE-502 High
No
No
 10.0.1.0.2 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 21 more
#VU52564 - Deserialization of Untrusted Data
CVE-2021-21347		 CWE-502 High
No
No
 10.0.1.0.2 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 21 more
#VU52563 - Deserialization of Untrusted Data
CVE-2021-21346		 CWE-502 High
No
No
 10.0.1.0.2 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 21 more
#VU52562 - Deserialization of Untrusted Data
CVE-2021-21345		 CWE-502 High
No
No
 10.0.1.0.2 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 28 more
#VU49040 - Improper input validation
CVE-2020-26259		 CWE-20 Medium
Available
No
 10.0.1.0.2 16.12.2020 SB2020121623
SB2021010802
SB2021062144
and 17 more
#VU49039 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-26217		 CWE-78 Medium
Available
No
 10.0.1.0.2 16.11.2020 SB2020111622
SB2020121624
SB20210120118
and 14 more


Showing elements 481 - 500 out of 633