Known vulnerabilities in IBM WIoTP MessageGateway

Vendor: IBM Corporation
Software: IBM WIoTP MessageGateway
Software CPE: cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 24
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM WIoTP MessageGateway IBM WIoTP MessageGateway is affected by 24 known vulnerabilities: 1 high, 16 medium, 7 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64013 - Improper Restriction of Rendered UI Layers or Frames
CVE-2021-46708		 CWE-1021 Medium
No
No
 5.0.0.2 07.06.2022 SB2022060710
SB2022061603
SB2022061612
and 9 more
#VU64011 - Improper input validation
CVE-2018-25031		 CWE-20 Low
Available
No
 5.0.0.2 07.06.2022 SB2022060710
SB2022061603
SB2022061612
and 23 more
#VU61581 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-22310		 CWE-327 Low
No
No
 5.0.0.2 24.03.2022 SB2022032402
SB2022032403
SB2022060710
and 3 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 5.0.0.2 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU60870 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-39038		 CWE-451 Low
No
No
 5.0.0.2 25.02.2022 SB2022022505
SB2022060710
SB2022062008
and 12 more
#VU60834 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23450		 CWE-94 High
No
No
 5.0.0.2 23.02.2022 SB2022022311
SB2022022312
SB2022031011
and 41 more
#VU59970 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2021-39031		 CWE-90 Medium
No
No
 5.0.0.2 25.01.2022 SB2022012506
SB2022032317
SB2022041207
and 12 more
#VU59718 - Improper input validation
CVE-2022-21349		 CWE-20 Medium
No
No
 5.0.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022060312
and 39 more
#VU59719 - Improper input validation
CVE-2022-21291		 CWE-20 Medium
No
No
 5.0.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 67 more
#VU59720 - Improper input validation
CVE-2022-21305		 CWE-20 Medium
No
No
 5.0.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 85 more
#VU59722 - Improper input validation
CVE-2022-21360		 CWE-20 Medium
No
No
 5.0.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 93 more
#VU59723 - Improper input validation
CVE-2022-21365		 CWE-20 Medium
No
No
 5.0.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 94 more
#VU59730 - Improper input validation
CVE-2022-21293		 CWE-20 Medium
No
No
 5.0.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 95 more
#VU59731 - Improper input validation
CVE-2022-21294		 CWE-20 Medium
No
No
 5.0.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 96 more
#VU59732 - Improper input validation
CVE-2022-21340		 CWE-20 Medium
No
No
 5.0.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 93 more
#VU59733 - Improper input validation
CVE-2022-21341		 CWE-20 Medium
No
No
 5.0.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 96 more
#VU59734 - Improper input validation
CVE-2022-21248		 CWE-20 Low
No
No
 5.0.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 95 more
#VU56064 - Out-of-bounds read
CVE-2021-3712		 CWE-125 Medium
No
No
 5.0.0.2 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 142 more
#VU55057 - Improper input validation
CVE-2021-2388		 CWE-20 Medium
No
No
 - 20.07.2021 SB2021072054
SB2021072055
SB2021072201
and 62 more
#VU55058 - Improper Verification of Cryptographic Signature
CVE-2021-2369		 CWE-347 Low
No
No
 - 20.07.2021 SB2021072054
SB2021072055
SB2021072201
and 76 more


Showing elements 1 - 20 out of 24