Known vulnerabilities in IBM Security Verify Information Queue

Vendor: IBM Corporation
Software: IBM Security Verify Information Queue
Software CPE: cpe:2.3:a:ibm_corporation:ibm_security_verify_information_queue:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 78
Public exploits: 6
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Verify Information Queue IBM Security Verify Information Queue is affected by 78 known vulnerabilities: 13 high, 39 medium, 26 low Critical High Medium Low

Vulnerabilities (78)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU92406 - Incorrect Regular Expression
CVE-2024-4067		 CWE-185 Medium
No
No
 10.0.9 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU92405 - Uncontrolled Memory Allocation
CVE-2024-4068		 CWE-789 Medium
No
No
 10.0.9 20.06.2024 SB20240620121
SB2024062833
SB2024070809
and 51 more
#VU88532 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-29041		 CWE-601 Medium
No
No
 10.0.9 15.04.2024 SB2024041530
SB2024041532
SB2024042918
and 44 more
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 10.0.9 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU87570 - Improper Access Control
CVE-2024-23944		 CWE-284 Low
No
No
 10.0.9 15.03.2024 SB2024031533
SB2024052921
SB2024061902
and 25 more
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849		 CWE-200 Low
No
No
 10.0.9 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU86983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-1597		 CWE-89 High
No
No
 10.0.8 04.03.2024 SB2024030405
SB2024030406
SB2024030427
and 47 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 10.0.8 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642		 CWE-770 Medium
No
No
 10.0.7 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU76817 - Security Features
CVE-2020-4282		 CWE-254 Low
No
No
 1.0.6 02.06.2023 SB2020110637
#VU76814 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4289		 CWE-200 Medium
No
No
 1.0.6 02.06.2023 SB2020110636
#VU76811 - Authentication Bypass by Spoofing
CVE-2020-4290		 CWE-290 Low
No
No
 1.0.6 02.06.2023 SB2020110635
#VU76810 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4164		 CWE-200 Low
No
No
 1.0.6 02.06.2023 SB2020110634
#VU76730 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-20405		 CWE-74 Medium
No
No
 10.0.0 01.06.2023 SB2021122241
#VU76729 - Session Fixation
CVE-2020-4291		 CWE-384 Low
No
No
 1.0.6 01.06.2023 SB2020110633
#VU76713 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4284		 CWE-200 Medium
No
No
 1.0.6 31.05.2023 SB2020110632
#VU76644 - Improper Privilege Management
CVE-2019-4218		 CWE-269 Low
No
No
 1.0.3 30.05.2023 SB2019051111
#VU76643 - Information Exposure Through an Error Message
CVE-2019-4219		 CWE-209 Medium
No
No
 1.0.3 30.05.2023 SB2019051110
#VU76641 - Use of Hard-coded Credentials
CVE-2020-4283		 CWE-798 Medium
No
No
 10.0.5 30.05.2023 SB2020110631
#VU76638 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4292		 CWE-200 Medium
No
No
 1.0.5 30.05.2023 SB2020110630


Showing elements 1 - 20 out of 78