Known vulnerabilities in IBM Spectrum Control

Vendor: IBM Corporation
Software: IBM Spectrum Control
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spectrum_control:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 167
Public exploits: 13
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Spectrum Control IBM Spectrum Control is affected by 167 known vulnerabilities: 1 critical, 15 high, 108 medium, 43 low Critical High Medium Low

Vulnerabilities (167)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131921 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-40175		 CWE-113 Medium
No
No
 5.5 20.05.2026 SB2026052045
SB2026052051
SB2026052052
and 16 more
#VU125750 - Server-Side Request Forgery (SSRF)
CVE-2025-62718		 CWE-918 High
No
No
 5.5 10.04.2026 SB2026041001
SB2026050419
SB2026050715
and 23 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754		 CWE-770 Medium
Available
No
 5.4.13.2 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU113227 - Uncaught Exception
CVE-2025-48997		 CWE-248 Medium
No
No
 5.4.13.2 25.07.2025 SB2025072557
SB2025072558
SB2025082202
and 9 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 5.4.13.2 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more
#VU113085 - Interpretation Conflict
CVE-2024-56339		 CWE-436 Medium
No
No
 5.4.13.2 21.07.2025 SB2025072116
SB2025072130
SB2025072305
and 45 more
#VU113074 - Stack-based buffer overflow
CVE-2025-36097		 CWE-121 High
No
No
 5.4.13.2 18.07.2025 SB20250718100
SB2025072128
SB2025072307
and 43 more
#VU112941 - Improper input validation
CVE-2025-30754		 CWE-20 Medium
No
No
 5.4.13.2 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112937 - Improper input validation
CVE-2025-30749		 CWE-20 High
No
No
 5.4.13.2 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106		 CWE-20 High
No
No
 5.4.13.2 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU112255 - Deserialization of Untrusted Data
CVE-2025-27818		 CWE-502 Medium
No
No
 5.4.13.2 04.07.2025 SB20250704102
SB2025070708
SB2025080519
and 16 more
#VU112146 - Server-Side Request Forgery (SSRF)
CVE-2025-27817		 CWE-918 High
Available
No
 5.4.13.2 03.07.2025 SB2025070339
SB2025070340
SB2025070345
and 42 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 5.4.13.2 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU107520 - Improper input validation
CVE-2025-21587		 CWE-20 Medium
No
No
 5.4.13.2 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 103 more
#VU107521 - Improper input validation
CVE-2025-30698		 CWE-20 Medium
No
No
 5.4.13.2 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 93 more
#VU105112 - Resource exhaustion
CVE-2025-23184		 CWE-400 Medium
No
No
 5.4.13.2 28.02.2025 SB2025022807
SB2025030340
SB2025041017
and 40 more
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141		 CWE-200 Medium
No
No
 5.4.13 21.11.2024 SB2024112150
SB2024120226
SB2024120331
and 34 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 5.4.13 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU96744 - Type confusion
CVE-2024-6119		 CWE-843 Medium
No
No
 5.4.13 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU55534 - Improper input validation
CVE-2021-32796		 CWE-20 Medium
No
No
 5.4.13.2 03.08.2021 SB2021080308
SB2025082522
SB2025082721
and 4 more


Showing elements 1 - 20 out of 167