Known vulnerabilities in IBM Security Verify Governance - page 32

Vendor: IBM Corporation
Software: IBM Security Verify Governance
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_verify_governance:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 633
Public exploits: 53
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Governance IBM Security Verify Governance is affected by 633 known vulnerabilities: 2 critical, 117 high, 253 medium, 261 low Critical High Medium Low

Vulnerabilities (633)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61257 - UNIX Symbolic Link (Symlink) Following
CVE-2021-39135		 CWE-61 Low
No
No
 - 11.03.2022 SB2021083138
SB2022031104
SB2021120224
and 6 more
#VU61256 - UNIX Symbolic Link (Symlink) Following
CVE-2021-39134		 CWE-61 Low
No
No
 - 11.03.2022 SB2021083138
SB2022031104
SB2021120224
and 5 more
#VU61254 - Use After Free
CVE-2021-22940		 CWE-416 Medium
No
No
 - 11.03.2022 SB2021081615
SB2022031104
SB2022060618
and 23 more
#VU59551 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21824		 CWE-94 Medium
No
No
 - 12.01.2022 SB2022011216
SB2022041205
SB2022060315
and 39 more
#VU59549 - Improper Validation of Certificate with Host Mismatch
CVE-2021-44532		 CWE-297 Medium
No
No
 - 12.01.2022 SB2022011216
SB2022041522
SB2022042806
and 36 more
#VU59234 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-22960		 CWE-444 Medium
No
No
 - 05.01.2022 SB2022010523
SB2022010524
SB2022042806
and 40 more
#VU59233 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-22959		 CWE-444 Medium
No
No
 - 05.01.2022 SB2022010523
SB2022010524
SB2022011841
and 43 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 - 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU58485 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-44280		 CWE-89 High
No
No
 - 02.12.2021 SB2021120207
SB2022062221
#VU58204 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-37713		 CWE-22 Medium
No
No
 - 17.11.2021 SB2021111707
SB2022031104
SB2022060618
and 13 more
#VU58203 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-37712		 CWE-22 Medium
No
No
 - 17.11.2021 SB2021111707
SB2021111710
SB2022031104
and 24 more
#VU58202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-37701		 CWE-22 Medium
No
No
 - 17.11.2021 SB2021111706
SB2021111710
SB2022031104
and 24 more
#VU57498 - Improper input validation
CVE-2021-22931		 CWE-20 High
No
No
 - 19.10.2021 SB2021101945
SB2022020113
SB2022031104
and 28 more


Showing elements 621 - 640 out of 633