Known vulnerabilities in IBM Tivoli Netcool Impact - page 8

Software CPE: cpe:2.3:a:ibm_corporation:ibm_tivoli_netcool_impact:*:*:*:*:*:*:*:*
Total vulnerabilities: 171
Public exploits: 14
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Tivoli Netcool Impact IBM Tivoli Netcool Impact is affected by 171 known vulnerabilities: 2 critical, 19 high, 100 medium, 50 low Critical High Medium Low

Vulnerabilities (171)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165
CWE-444 Medium
No
No
7.1.0.28 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU68844 - Type confusion
CVE-2022-3676
CWE-843 Medium
No
No
7.1.0.28 31.10.2022 SB2022103129
SB2022111110
SB2022111724
and 60 more
#VU68437 - Improper input validation
CVE-2022-21628
CWE-20 Medium
No
No
7.1.0.28 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 138 more
#VU68438 - Improper input validation
CVE-2022-21626
CWE-20 Medium
No
No
7.1.0.28 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68441 - Improper input validation
CVE-2022-21624
CWE-20 Low
No
No
7.1.0.28 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU68442 - Improper input validation
CVE-2022-21619
CWE-20 Low
No
No
7.1.0.28 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 140 more
#VU67948 - Resource exhaustion
CVE-2022-37734
CWE-400 Medium
No
No
7.1.0.28 05.10.2022 SB2022100553
SB2022100555
SB2022100650
and 19 more
#VU66747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31197
CWE-89 High
No
No
7.1.0.27 24.08.2022 SB2022082432
SB2022082543
SB2022090901
and 27 more
#VU65906 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22393
CWE-200 Low
No
No
7.1.0.26 01.08.2022 SB2022080110
SB2022081039
SB2022081515
and 8 more
#VU65845 - Authentication Bypass by Spoofing
CVE-2022-22476
CWE-290 Medium
No
No
7.1.0.27 28.07.2022 SB2022072816
SB2022080903
SB2022082228
and 29 more
#VU65496 - Improper input validation
CVE-2022-21541
CWE-20 Medium
No
No
7.1.0.28 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 105 more
#VU65497 - Improper input validation
CVE-2022-21540
CWE-20 Medium
No
No
7.1.0.28 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 105 more
#VU65486 - Improper input validation
CVE-2022-24839
CWE-20 Medium
No
No
7.1.0.28 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU62716 - Improper input validation
CVE-2022-26520
CWE-20 High
No
No
7.1.0.25 02.05.2022 SB2022050206
SB2022061311
SB2022062202
and 13 more
#VU62714 - Improper Initialization
CVE-2022-21724
CWE-665 Medium
No
No
7.1.0.25 02.05.2022 SB2022050205
SB2022062202
SB2022062204
and 18 more
#VU62400 - Improper input validation
CVE-2022-21496
CWE-20 Medium
No
No
7.1.0.26 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 118 more
#VU62078 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28544
CWE-200 Low
No
No
7.1.0.26 12.04.2022 SB2022041213
SB2022041263
SB2022041402
and 10 more
#VU52449 - Improper input validation
CVE-2021-2163
CWE-20 Medium
No
No
7.1.0.28 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more
#VU47481 - Improper input validation
CVE-2020-13956
CWE-20 Medium
No
No
7.1.0.27 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more
#VU27956 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2020-11971
CWE-350 Medium
No
No
7.1.0.27 17.05.2020 SB2020051702
SB2022042254
SB2022100521
and 5 more


Showing elements 141 - 160 out of 171