Known vulnerabilities in IBM Spectrum Control - page 6

Vendor: IBM Corporation
Software: IBM Spectrum Control
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spectrum_control:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 167
Public exploits: 13
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Spectrum Control IBM Spectrum Control is affected by 167 known vulnerabilities: 1 critical, 15 high, 108 medium, 43 low Critical High Medium Low

Vulnerabilities (167)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79340 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-32003		 CWE-22 Low
No
No
 5.4.10.2 10.08.2023 SB2023081012
SB20230821189
SB20230821190
and 9 more
#VU79337 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-32004		 CWE-22 Medium
No
No
 5.4.10.2 10.08.2023 SB2023081012
SB20230821189
SB20230821190
and 10 more
#VU79336 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-32558		 CWE-22 Medium
No
No
 5.4.10.2 10.08.2023 SB2023081012
SB20230821189
SB20230821190
and 9 more
#VU79335 - Permissions, Privileges, and Access Controls
CVE-2023-32559		 CWE-264 Medium
No
No
 5.4.10.2 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 39 more
#VU79332 - Permissions, Privileges, and Access Controls
CVE-2023-32002		 CWE-264 Medium
No
No
 5.4.10.2 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 44 more
#VU77606 - Inconsistency Between Implementation and Documented Design
CVE-2023-30590		 CWE-1068 Medium
No
No
 5.4.10.2 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77605 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-30589		 CWE-444 Medium
No
No
 5.4.10.2 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 43 more
#VU77604 - Improper input validation
CVE-2023-30588		 CWE-20 Medium
No
No
 5.4.10.2 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77603 - Permissions, Privileges, and Access Controls
CVE-2023-30586		 CWE-264 Medium
No
No
 5.4.10.2 21.06.2023 SB2023062144
SB2023072539
SB2023082320
and 6 more
#VU77601 - Untrusted Search Path
CVE-2023-30585		 CWE-426 Low
No
No
 5.4.10.2 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 13 more
#VU77599 - Permissions, Privileges, and Access Controls
CVE-2023-30583		 CWE-264 Low
No
No
 5.4.10.2 21.06.2023 SB2023062144
SB2023072539
SB2023082320
and 6 more
#VU77596 - Permissions, Privileges, and Access Controls
CVE-2023-30582		 CWE-264 Low
No
No
 5.4.10.2 21.06.2023 SB2023062144
SB2023072539
SB2023082320
and 6 more
#VU77595 - Improper Access Control
CVE-2023-30587		 CWE-284 Medium
No
No
 5.4.10.2 21.06.2023 SB2023062144
SB2023072539
SB2023082320
and 7 more
#VU77594 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-30584		 CWE-22 Medium
No
No
 5.4.10.2 21.06.2023 SB2023062144
SB2023072539
SB2023082320
and 8 more
#VU77586 - Permissions, Privileges, and Access Controls
CVE-2023-30581		 CWE-264 Medium
No
No
 5.4.10.2 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 31 more
#VU74271 - Resource exhaustion
CVE-2012-2098		 CWE-400 Medium
No
No
 5.4.10.2 31.03.2023 SB2012062904
SB2023040315
SB2023040465
and 10 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881		 CWE-407 Medium
No
No
 5.4.10.2 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU54856 - Resource exhaustion
CVE-2021-36374		 CWE-400 Medium
No
No
 5.4.10.2 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 43 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 5.4.10.2 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979		 CWE-264 Low
No
No
 5.4.10.2 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more


Showing elements 101 - 120 out of 167