Known vulnerabilities in IBM Security Verify Governance - page 26

Vendor: IBM Corporation
Software: IBM Security Verify Governance
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_verify_governance:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 633
Public exploits: 53
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Governance IBM Security Verify Governance is affected by 633 known vulnerabilities: 2 critical, 117 high, 253 medium, 261 low Critical High Medium Low

Vulnerabilities (633)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73954 - Deserialization of Untrusted Data
CVE-2021-39151		 CWE-502 High
No
No
 10.0.1.0.2 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73946 - Deserialization of Untrusted Data
CVE-2021-39141		 CWE-502 High
Available
No
 10.0.1.0.2 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 14 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 10.0.1.0.4 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 10.0.1.0.4 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 10.0.1.0.4 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68375 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-38712		 CWE-451 Medium
No
No
 10.0.1.0.3 18.10.2022 SB2022101803
SB2022111011
SB2022122019
and 6 more
#VU60834 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23450		 CWE-94 High
No
No
 10.0.1.0.5 23.02.2022 SB2022022311
SB2022022312
SB2022031011
and 41 more
#VU60089 - Improper input validation
CVE-2021-39153		 CWE-20 High
No
No
 10.0.1.0.2 27.01.2022 SB2022012755
SB2022042262
SB2023032239
and 13 more
#VU56019 - Resource exhaustion
CVE-2021-30468		 CWE-400 Medium
No
No
 10.0.1.0.5 20.08.2021 SB2021082016
SB2021101933
SB2022042254
and 8 more
#VU52569 - Deserialization of Untrusted Data
CVE-2021-21342		 CWE-502 High
No
No
 10.0.1.0.2 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 19 more
#VU52568 - Deserialization of Untrusted Data
CVE-2021-21343		 CWE-502 Medium
No
No
 10.0.1.0.2 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 16 more
#VU52566 - Resource exhaustion
CVE-2021-21348		 CWE-400 Medium
No
No
 10.0.1.0.2 26.04.2021 SB2021042607
SB2021062144
SB2021062145
and 16 more
#VU52561 - Deserialization of Untrusted Data
CVE-2021-21344		 CWE-502 High
No
No
 10.0.1.0.2 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 19 more
#VU51939 - Improper input validation
CVE-2021-22696		 CWE-20 Medium
No
No
 10.0.1.0.5 06.04.2021 SB2021040608
SB2021120219
SB2021120336
and 8 more
#VU49041 - Server-Side Request Forgery (SSRF)
CVE-2020-26258		 CWE-918 Medium
Available
No
 10.0.1.0.2 16.12.2020 SB2020121623
SB2021010802
SB2021062144
and 16 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 10.0.1.0.4 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU26530 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2020-1954		 CWE-300 Low
No
No
 10.0.1.0.5 02.04.2020 SB2020040206
SB2020102703
SB2020102832
and 8 more
#VU24272 - Improper Access Control
CVE-2019-20330		 CWE-284 Low
No
No
 10.0.1.0.4 14.01.2020 SB2020010309
SB2020032709
SB2020042101
and 18 more
#VU17777 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-14720		 CWE-611 Low
No
No
 10.0.1.0.4 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 21 more
#VU12886 - Uncontrolled Memory Allocation
CVE-2018-10237		 CWE-789 Low
No
No
 10.0.1.0.4 21.05.2018 SB2018052310
SB2018083005
SB2018092411
and 43 more


Showing elements 501 - 520 out of 633