Known vulnerabilities in IBM Spectrum Symphony - page 5
Vendor:
IBM Corporation
Software:
IBM Spectrum Symphony
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_spectrum_symphony:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
105
Public exploits:
12
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (105)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU77612 - Resource exhaustion CVE-2023-2828 |
CWE-400 | Medium | 7.3.2 Fix 601711 | 21.06.2023 |
SB2023062155 SB2023062201 SB2023062601 and 66 more |
||
| #VU77611 - Improper input validation CVE-2023-2829 |
CWE-20 | Medium | 7.3.2 Fix 601711 | 21.06.2023 |
SB2023062155 SB2023100615 SB2023100625 |
||
| #VU77610 - Resource Management Errors CVE-2023-2911 |
CWE-399 | Medium | 7.3.2 Fix 601711 | 21.06.2023 |
SB2023062155 SB2023062201 SB2023062205 and 15 more |
||
| #VU75562 - Improper input validation CVE-2023-20861 |
CWE-20 | Medium | 7.3.2 Fix 601711 | 27.04.2023 |
SB2023042742 SB2023042746 SB2023042832 and 61 more |
||
| #VU75409 - Improper input validation CVE-2023-20863 |
CWE-20 | Medium | 7.3.2 Fix 601711 | 21.04.2023 |
SB2023042131 SB2023042132 SB2023050511 and 88 more |
||
| #VU75044 - Uncontrolled Recursion CVE-2023-1370 |
CWE-674 | Medium | 7.3.2 Fix 601711 | 12.04.2023 |
SB2023041258 SB2023041259 SB2023041809 and 130 more |
||
| #VU72733 - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2023-24975 |
CWE-644 | Medium | 7.3.1 | 03.03.2023 |
SB2023030309 |
||
| #VU71995 - Use After Free CVE-2023-0215 |
CWE-416 | Medium | 7.3.2 | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 209 more |
||
| #VU71993 - Information Exposure Through Timing Discrepancy CVE-2022-4304 |
CWE-208 | Medium | 7.3.2 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020767 and 222 more |
||
| #VU71992 - Type confusion CVE-2023-0286 |
CWE-843 | High | 7.3.2 | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 223 more |
||
| #VU71749 - Improper input validation CVE-2022-3488 |
CWE-20 | Medium | 7.3.2 Fix 601711 | 02.02.2023 |
SB2023012556 SB2023100615 SB2023100625 and 1 more |
||
| #VU70524 - Out-of-bounds write CVE-2022-41854 |
CWE-787 | Medium | 7.3.2 Fix 601711 | 28.12.2022 |
SB2022122813 SB2022122926 SB2023010417 and 52 more |
||
| #VU70385 - Deserialization of Untrusted Data CVE-2022-1471 |
CWE-502 | High | 7.3.2 Fix 601711 | 15.12.2022 |
SB2022121539 SB2022121540 SB2022121928 and 124 more |
||
| #VU67668 - Stack-based buffer overflow CVE-2022-38750 |
CWE-121 | Medium | 7.3.2 Fix 601711 | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 50 more |
||
| #VU67666 - Stack-based buffer overflow CVE-2022-38749 |
CWE-121 | Medium | 7.3.2 Fix 601711 | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 51 more |
||
| #VU67665 - Resource exhaustion CVE-2022-25857 |
CWE-400 | Medium | 7.3.2 Fix 601711 | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 83 more |
||
| #VU67664 - Stack-based buffer overflow CVE-2022-38752 |
CWE-121 | Medium | 7.3.2 Fix 601711 | 27.09.2022 |
SB2022092715 SB2022092728 SB2022100555 and 66 more |
||
| #VU67663 - Out-of-bounds write CVE-2022-38751 |
CWE-787 | Medium | 7.3.2 Fix 601711 | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 50 more |
||
| #VU65499 - Improper input validation CVE-2021-31684 |
CWE-20 | Medium | 7.3.2 Fix 601711 | 20.07.2022 |
SB2022072048 SB2022072056 SB2022112850 and 20 more |
||
| #VU52578 - Improper input validation CVE-2017-18640 |
CWE-20 | Medium | 7.3.2 Fix 601711 | 26.04.2021 |
SB2021042616 SB2021081922 SB2021060732 and 20 more |
Showing elements 81 - 100 out of 105