Known vulnerabilities in IBM Tivoli Netcool/OMNIbus WebGUI

Vendor: IBM Corporation
Software: IBM Tivoli Netcool/OMNIbus WebGUI
Software CPE: cpe:2.3:a:ibm_corporation:ibm_tivoli_netcool_omnibus_webgui:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 85
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Tivoli Netcool/OMNIbus WebGUI IBM Tivoli Netcool/OMNIbus WebGUI is affected by 85 known vulnerabilities: 1 critical, 9 high, 59 medium, 16 low Critical High Medium Low

Vulnerabilities (85)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144840 - Allocation of Resources Without Limits or Throttling
CVE-2026-73635		 CWE-770 Medium
No
No
 8.1.0.41 iFix 002 24.08.2026 SB20260824147
SB2026091581
#VU144839 - Resource exhaustion
CVE-2026-73634		 CWE-400 Medium
No
No
 8.1.0.41 iFix 002 24.08.2026 SB20260824147
SB2026091581
#VU135794 - Inefficient Algorithmic Complexity
CVE-2026-59880		 CWE-407 Medium
No
No
 8.1.0.41 iFix 001 29.06.2026 SB2026062999
SB2026080424
SB2026091638
and 2 more
#VU135792 - Integer overflow
CVE-2026-59879		 CWE-190 Medium
No
No
 8.1.0.41 iFix 001 29.06.2026 SB2026062999
SB2026080424
SB2026091638
and 2 more
#VU132377 - Always-Incorrect Control Flow Implementation
CVE-2026-41988		 CWE-670 Low
No
No
 8.1.0.41 27.05.2026 SB2026052767
SB2026052768
SB20260528259
and 9 more
#VU132376 - Out-of-bounds write
CVE-2026-41907		 CWE-787 High
No
No
 8.1.0.41 27.05.2026 SB2026052766
SB2026052768
SB2026060118
and 8 more
#VU128402 - Improper Encoding or Escaping of Output
CVE-2026-34480		 CWE-116 Medium
No
No
 8.1.0.41 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 21 more
#VU128401 - Improper Encoding or Escaping of Output
CVE-2026-34479		 CWE-116 Medium
No
No
 8.1.0.41 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 20 more
#VU128400 - Improper Output Neutralization for Logs
CVE-2026-34478		 CWE-117 Medium
No
No
 8.1.0.41 28.04.2026 SB20260428217
SB2026052632
SB2026052731
and 18 more
#VU128399 - Improper Certificate Validation
CVE-2026-34477		 CWE-295 Medium
No
No
 8.1.0.41 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 21 more
#VU126758 - Improper input validation
CVE-2026-22016		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 79 more
#VU126761 - Improper input validation
CVE-2026-22021		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 81 more
#VU126762 - Improper input validation
CVE-2026-22013		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 78 more
#VU126766 - Improper input validation
CVE-2026-34268		 CWE-20 Low
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 78 more
#VU125804 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-2950		 CWE-1321 Medium
No
No
 8.1.0.41 10.04.2026 SB2026041094
SB2026042049
SB2026042720
and 15 more
#VU125803 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-4800		 CWE-94 High
No
No
 8.1.0.41 10.04.2026 SB2026041094
SB20260410101
SB20260410102
and 64 more
#VU124825 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-29063		 CWE-1321 Medium
No
No
 8.1.0.41 02.04.2026 SB2026040246
SB2026040612
SB2026040627
and 35 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465		 CWE-1321 Medium
No
No
 8.1.0.41 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 69 more
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 8.1.0.41 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 101 more
#VU76755 - Resource exhaustion
CVE-2016-5004		 CWE-400 Medium
No
No
 8.1.0.41 01.06.2023 SB2017060662
SB2023060129
SB2025072908
and 1 more


Showing elements 1 - 20 out of 85