Known vulnerabilities in IBM Spectrum Control - page 8

Vendor: IBM Corporation
Software: IBM Spectrum Control
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spectrum_control:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 167
Public exploits: 13
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Spectrum Control IBM Spectrum Control is affected by 167 known vulnerabilities: 1 critical, 15 high, 108 medium, 43 low Critical High Medium Low

Vulnerabilities (167)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 5.4.10.1 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU70453 - Inadequate Encryption Strength
CVE-2022-38391		 CWE-326 Low
No
No
 5.4.9 20.12.2022 SB2022122030
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165		 CWE-444 Medium
No
No
 5.4.9 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU68843 - Improper input validation
CVE-2022-39353		 CWE-20 High
No
No
 5.4.9 31.10.2022 SB2022103127
SB2022121803
SB2022122303
and 4 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 5.4.9 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 5.4.9 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68437 - Improper input validation
CVE-2022-21628		 CWE-20 Medium
No
No
 5.4.9 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 138 more
#VU68438 - Improper input validation
CVE-2022-21626		 CWE-20 Medium
No
No
 5.4.9 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68441 - Improper input validation
CVE-2022-21624		 CWE-20 Low
No
No
 5.4.9 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU68442 - Improper input validation
CVE-2022-21619		 CWE-20 Low
No
No
 5.4.9 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 140 more
#VU65845 - Authentication Bypass by Spoofing
CVE-2022-22476		 CWE-290 Medium
No
No
 5.4.9 28.07.2022 SB2022072816
SB2022080903
SB2022082228
and 29 more
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 5.4.4 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU54852 - Resource exhaustion
CVE-2021-35517		 CWE-400 Medium
No
No
 5.4.4 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 33 more
#VU54675 - Deserialization of Untrusted Data
CVE-2021-29505		 CWE-502 Medium
Available
No
 5.4.4 12.07.2021 SB2021071217
SB2021071218
SB2021071389
and 19 more
#VU54625 - Incorrect Default Permissions
CVE-2021-22921		 CWE-276 Low
No
No
 5.4.4 08.07.2021 SB2021100417
SB2022031104
SB2022060315
and 7 more
#VU54624 - Out-of-bounds read
CVE-2021-22918		 CWE-125 Medium
No
No
 5.4.4 08.07.2021 SB2021070819
SB2021072009
SB2021081123
and 40 more
#VU48792 - Incorrect Default Permissions
CVE-2020-17521		 CWE-276 Low
No
No
 5.4.10 06.12.2020 SB2020120601
SB2021012082
SB2021012083
and 31 more
#VU14515 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1000632		 CWE-611 Low
No
No
 5.4.10 21.08.2018 SB2018082321
SB2018120722
SB2018121006
and 20 more
#VU8911 - Permissions, Privileges, and Access Controls
CVE-2016-6814		 CWE-264 Low
No
No
 5.4.10 20.10.2017 SB2017101714
SB2020031303
SB20200114129
and 12 more
#VU831 - Deserialization of Untrusted Data
CVE-2015-3253		 CWE-502 High
No
No
 5.4.10 11.10.2016 SB2020042104
SB2023030707
SB2023040530
and 5 more


Showing elements 141 - 160 out of 167