Known vulnerabilities in IBM Spectrum Conductor

Vendor: IBM Corporation
Software: IBM Spectrum Conductor
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spectrum_conductor:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 32
Public exploits: 6
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Spectrum Conductor IBM Spectrum Conductor is affected by 32 known vulnerabilities: 2 critical, 3 high, 22 medium, 5 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 2.5.1 Fix 601861 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804		 CWE-200 Low
Available
No
 2.5.1 Fix 601861 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU80931 - Resource exhaustion
CVE-2023-3341		 CWE-400 Medium
No
No
 2.5.1 Fix 601861 20.09.2023 SB2023092048
SB2023092050
SB2023092148
and 90 more
#VU80886 - Incorrect Permission Assignment for Critical Resource
CVE-2023-34042		 CWE-732 Low
No
No
 2.5.1 Fix 601861 19.09.2023 SB2023091922
SB2023112217
SB2023120414
and 6 more
#VU77612 - Resource exhaustion
CVE-2023-2828		 CWE-400 Medium
No
No
 2.5.1 FP2 21.06.2023 SB2023062155
SB2023062201
SB2023062601
and 66 more
#VU77611 - Improper input validation
CVE-2023-2829		 CWE-20 Medium
No
No
 2.5.1 FP2 21.06.2023 SB2023062155
SB2023100615
SB2023100625
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 2.5.1 Fix 601861 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 99 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 2.5.1 FP2 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 2.5.1 FP2 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU74149 - Security Features
CVE-2023-0466		 CWE-254 Low
No
No
 2.5.1 FP2 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465		 CWE-347 Low
No
No
 2.5.1 FP2 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464		 CWE-400 Medium
No
No
 2.5.1 FP2 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 2.5.1 FP2 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 203 more
#VU71999 - NULL Pointer Dereference
CVE-2023-0401		 CWE-476 Medium
No
No
 2.5.1 FP2 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 52 more
#VU71998 - NULL Pointer Dereference
CVE-2023-0217		 CWE-476 Medium
No
No
 2.5.1 FP2 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 49 more
#VU71997 - Release of invalid pointer or reference
CVE-2023-0216		 CWE-763 Medium
No
No
 2.5.1 FP2 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 50 more
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 2.5.1 FP2 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71994 - Out-of-bounds read
CVE-2022-4203		 CWE-125 Medium
No
No
 2.5.1 FP2 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 47 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 2.5.1 FP2 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU71749 - Improper input validation
CVE-2022-3488		 CWE-20 Medium
No
No
 2.5.1 FP2 02.02.2023 SB2023012556
SB2023100615
SB2023100625
and 1 more


Showing elements 1 - 20 out of 32