Known vulnerabilities in IBM Security Verify Information Queue

Vendor: IBM Corporation
Software: IBM Security Verify Information Queue
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_verify_information_queue:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 78
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Information Queue IBM Security Verify Information Queue is affected by 78 known vulnerabilities: 13 high, 39 medium, 26 low Critical High Medium Low

Vulnerabilities (78)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU92406 - Incorrect Regular Expression
CVE-2024-4067		 CWE-185 Medium
No
No
 10.0.9 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU92405 - Uncontrolled Memory Allocation
CVE-2024-4068		 CWE-789 Medium
No
No
 10.0.9 20.06.2024 SB20240620121
SB2024062833
SB2024070809
and 51 more
#VU88532 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-29041		 CWE-601 Medium
No
No
 10.0.9 15.04.2024 SB2024041530
SB2024041532
SB2024042918
and 44 more
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 10.0.9 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU87570 - Improper Access Control
CVE-2024-23944		 CWE-284 Low
No
No
 10.0.9 15.03.2024 SB2024031533
SB2024052921
SB2024061902
and 23 more
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849		 CWE-200 Low
No
No
 10.0.9 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU86983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-1597		 CWE-89 High
No
No
 10.0.8 04.03.2024 SB2024030405
SB2024030406
SB2024030427
and 47 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 10.0.8 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642		 CWE-770 Medium
No
No
 10.0.7 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU76603 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2022-35284		 CWE-614 Medium
No
No
 10.0.3 29.05.2023 SB2023052917
#VU76602 - Resource exhaustion
CVE-2022-35283		 CWE-400 Low
No
No
 10.0.3 29.05.2023 SB2023052916
#VU76239 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-25653		 CWE-835 Medium
No
No
 10.0.5 17.05.2023 SB2023051753
SB2023072565
#VU75218 - Resource exhaustion
CVE-2023-26048		 CWE-400 Medium
No
No
 10.0.5 18.04.2023 SB2023041842
SB2023051753
SB2023060701
and 55 more
#VU72123 - Deserialization of Untrusted Data
CVE-2023-25194		 CWE-502 Low
Available
No
 10.0.5 11.02.2023 SB2023021101
SB2023030952
SB2023040419
and 40 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 10.0.5 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67489 - Resource exhaustion
CVE-2022-34917		 CWE-400 Medium
No
No
 10.0.5 20.09.2022 SB2022092020
SB2022100556
SB2022110304
and 21 more
#VU66181 - Session Fixation
CVE-2022-25896		 CWE-384 Medium
No
No
 10.0.5 08.08.2022 SB2022080818
SB2022080819
SB2022110270
and 7 more
#VU56790 - Information Exposure Through Timing Discrepancy
CVE-2021-38153		 CWE-208 Low
No
No
 10.0.5 21.09.2021 SB2021092116
SB2022010906
SB2022012104
and 21 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 10.0.0 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 10.0.0 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more


Showing elements 1 - 20 out of 78