Known vulnerabilities in IBM Security Verify Governance - page 30

Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_verify_governance:*:*:*:*:*:*:*:*
Total vulnerabilities: 633
Public exploits: 53
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Governance IBM Security Verify Governance is affected by 633 known vulnerabilities: 2 critical, 117 high, 253 medium, 261 low Critical High Medium Low

Vulnerabilities (633)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31197
CWE-89 High
No
No
10.0.1.0.3 24.08.2022 SB2022082432
SB2022082543
SB2022090901
and 27 more
#VU65831 - Improper input validation
CVE-2022-2047
CWE-20 Low
No
No
10.0.1.0.3 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more
#VU62716 - Improper input validation
CVE-2022-26520
CWE-20 High
No
No
10.0.1.0.3 02.05.2022 SB2022050206
SB2022061311
SB2022062202
and 13 more
#VU62714 - Improper Initialization
CVE-2022-21724
CWE-665 Medium
No
No
10.0.1.0.3 02.05.2022 SB2022050205
SB2022062202
SB2022062204
and 18 more
#VU61799 - Out-of-bounds write
CVE-2020-36518
CWE-787 Medium
No
No
10.0.1.0.4 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-37714
CWE-835 Medium
No
No
10.0.1.0.3 16.11.2021 SB2021111606
SB2021111715
SB2022012314
and 24 more
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550
CWE-300 Medium
No
No
10.0.1.0.3 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428
CWE-613 Low
No
No
10.0.1.0.3 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more
#VU53973 - Improper input validation
CVE-2021-28169
CWE-20 Medium
No
No
10.0.1.0.3 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU52449 - Improper input validation
CVE-2021-2163
CWE-20 Medium
No
No
10.0.1.0.3 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more
#VU52385 - Improper input validation
CVE-2020-27223
CWE-20 Medium
Available
No
10.0.1.0.3 21.04.2021 SB2021042107
SB2021063002
SB2021063034
and 19 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649
CWE-611 Medium
No
No
10.0.1.0.4 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU41479 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-13692
CWE-611 Medium
No
No
10.0.1.0.3 10.08.2020 SB2020060439
SB2020081017
SB2020081018
and 13 more
#VU26320 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10241
CWE-79 Low
No
No
10.0.1.0.3 23.03.2020 SB2020032710
SB2020072802
SB2020121701
and 14 more
#VU25067 - Improper input validation
CVE-2019-10247
CWE-20 Medium
No
No
10.0.1.0.3 07.02.2020 SB2020011489
SB2020032710
SB2020042110
and 25 more
#VU13529 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2017-7658
CWE-444 Low
No
No
10.0.1.0.3 02.07.2018 SB2018070205
SB2018082001
SB2020102711
and 17 more
#VU13528 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7657
CWE-200 Low
No
No
10.0.1.0.3 02.07.2018 SB2018070205
SB2018082001
SB2022040632
and 18 more
#VU13527 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2017-7656
CWE-444 Low
No
No
10.0.1.0.3 30.06.2018 SB2018070205
SB2018082001
SB2022041923
and 17 more
#VU31409 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-6748
CWE-79 Low
No
No
10.0.1.0.3 25.09.2017 SB2017092503
SB2023012311
#VU340 - Improper input validation
CVE-2016-4800
CWE-20 Medium
No
No
10.0.1.0.3 20.08.2016 SB2016060101
SB2023011129
SB2024021519


Showing elements 581 - 600 out of 633