Known vulnerabilities in IBM Spectrum Symphony

Vendor: IBM Corporation
Software: IBM Spectrum Symphony
Software CPE: cpe:2.3:a:ibm_corporation:ibm_spectrum_symphony:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 105
Public exploits: 12
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Spectrum Symphony IBM Spectrum Symphony is affected by 105 known vulnerabilities: 2 critical, 5 high, 79 medium, 19 low Critical High Medium Low

Vulnerabilities (105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121014 - Resource exhaustion
CVE-2025-8885		 CWE-400 Medium
No
No
 7.3.2 FP3 07.01.2026 SB2024050731
SB2026010745
SB2026010827
and 10 more
#VU117436 - Allocation of Resources Without Limits or Throttling
CVE-2025-8916		 CWE-770 Medium
No
No
 7.3.2 FP3 21.10.2025 SB2025102223
SB2025102241
SB2025102248
and 35 more
#VU115571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-36000		 CWE-79 Low
No
No
 7.3.2 Fix 602620 16.09.2025 SB20250916311
SB20250916316
SB2025092515
and 25 more
#VU115568 - Allocation of Resources Without Limits or Throttling
CVE-2025-36047		 CWE-770 Medium
No
No
 7.3.2 Fix 602620 16.09.2025 SB20250916312
SB20250916316
SB20250916321
and 29 more
#VU114067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-41242		 CWE-22 Medium
No
No
 7.3.2 FP3 14.08.2025 SB2025081411
SB2025100743
SB2025110336
and 18 more
#VU114006 - Privilege Chaining
CVE-2025-36124		 CWE-268 High
No
No
 7.3.2 Fix 602620 13.08.2025 SB2025081354
SB2025082918
SB2025082921
and 23 more
#VU113085 - Interpretation Conflict
CVE-2024-56339		 CWE-436 Medium
No
No
 7.3.2 FP3 21.07.2025 SB2025072116
SB2025072130
SB2025072305
and 45 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 7.3.2 FP3 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU103600 - Covert Timing Channel
CVE-2024-13176		 CWE-385 Medium
No
No
 7.3.2 FP3 04.02.2025 SB2025020454
SB2025020456
SB2025020656
and 58 more
#VU103436 - Resource exhaustion
CVE-2024-11187		 CWE-400 Medium
No
No
 7.3.2 FP3 29.01.2025 SB2025012962
SB2025012964
SB2025012965
and 83 more
#VU98795 - Security Features
CVE-2024-38820		 CWE-254 Medium
No
No
 7.3.2 FP3 17.10.2024 SB2024101781
SB2024112618
SB2024120428
and 40 more
#VU94713 - Reachable Assertion
CVE-2024-4076		 CWE-617 Medium
No
No
 7.3.2 FP3 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 36 more
#VU94711 - Resource exhaustion
CVE-2024-1975		 CWE-400 Medium
No
No
 7.3.2 FP3 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 72 more
#VU94710 - Resource Management Errors
CVE-2024-1737		 CWE-399 Medium
No
No
 7.3.2 FP3 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 73 more
#VU94709 - Resource exhaustion
CVE-2024-0760		 CWE-400 Medium
No
No
 7.3.2 FP3 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 13 more
#VU94555 - Improper input validation
CVE-2024-21147		 CWE-20 Medium
No
No
 7.3.2 FP3 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU94556 - Improper input validation
CVE-2024-21145		 CWE-20 Medium
No
No
 7.3.2 FP3 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU94557 - Improper input validation
CVE-2024-21140		 CWE-20 Medium
No
No
 7.3.2 FP3 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 119 more
#VU86383 - Resource exhaustion
CVE-2023-4408		 CWE-400 Medium
No
No
 7.3.2 FP3 13.02.2024 SB2024021329
SB2024021330
SB2024021347
and 82 more
#VU62314 - Security Features
CVE-2022-22968		 CWE-254 Medium
Available
No
 7.3.2 FP3 14.04.2022 SB2022041405
SB2022042903
SB2022060324
and 31 more


Showing elements 1 - 20 out of 105