Known vulnerabilities in IBM Workload Scheduler

Vendor: IBM Corporation
Software: IBM Workload Scheduler
Software CPE: cpe:2.3:a:ibm_corporation:ibm_workload_scheduler:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 92
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Workload Scheduler IBM Workload Scheduler is affected by 92 known vulnerabilities: 6 high, 62 medium, 24 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101052 - Unprotected Storage of Credentials
CVE-2024-49351		 CWE-256 Low
No
No
 9.5.0.7, 10.1.0.5, 10.2.2 29.11.2024 SB2024112923
#VU95131 - Out-of-bounds read
CVE-2024-7264		 CWE-125 Medium
No
No
 10.2.2 01.08.2024 SB2024080110
SB2024080117
SB20240805104
and 43 more
#VU91723 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-35255		 CWE-362 Low
No
No
 9.5.0.7, 10.1.0.5, 10.2.2 11.06.2024 SB20240611248
SB2024091320
SB2024091965
and 15 more
#VU89712 - Stack-based buffer overflow
CVE-2024-33599		 CWE-121 High
No
No
 10.1.0.5, 10.2.3 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 84 more
#VU89711 - NULL Pointer Dereference
CVE-2024-33600		 CWE-476 Medium
No
No
 10.1.0.5, 10.2.3 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 83 more
#VU89709 - Memory corruption
CVE-2024-33602		 CWE-119 Medium
No
No
 10.1.0.5, 10.2.3 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 91 more
#VU88822 - Memory corruption
CVE-2024-2961		 CWE-119 High
Available
Exploited
 10.1.0.5, 10.2.3 18.04.2024 SB2024041855
SB2024041856
SB2024041857
and 107 more
#VU88665 - Improper input validation
CVE-2024-21085		 CWE-20 Low
No
No
 10.2.5 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88666 - Improper input validation
CVE-2024-21011		 CWE-20 Low
No
No
 10.2.5 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88668 - Improper input validation
CVE-2024-21094		 CWE-20 Low
No
No
 10.2.5 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more
#VU87685 - Resource exhaustion
CVE-2024-0450		 CWE-400 Medium
No
No
 10.1.0.6, 10.2.5 21.03.2024 SB2024032107
SB2024032110
SB2024040848
and 80 more
#VU87185 - UNIX Symbolic Link (Symlink) Following
CVE-2023-6597		 CWE-61 Low
No
No
 10.1.0.6, 10.2.5 07.03.2024 SB2024030718
SB2024030726
SB2024030727
and 88 more
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 10.1.0.5, 10.2.3 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU82583 - Observable discrepancy
CVE-2023-33850		 CWE-203 Medium
No
No
 10.1.0.5, 10.2.3 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU82077 - Resource exhaustion
CVE-2022-48564		 CWE-400 Medium
No
No
 10.1.0.5, 10.2.3 17.10.2023 SB2023101707
SB20231123125
SB2023112746
and 19 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804		 CWE-200 Low
Available
No
 10.1.0.5, 10.2.3 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217		 CWE-319 Medium
No
No
 10.1.0.5, 10.2.3 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU76487 - Inadequate Encryption Strength
CVE-2023-32342		 CWE-326 Medium
No
No
 10.1.0.6, 10.2.5 24.05.2023 SB2023052446
SB2023060817
SB2023061605
and 25 more
#VU72050 - Improper input validation
CVE-2023-25193		 CWE-20 Medium
No
No
 10.1.0.5, 10.2.3 08.02.2023 SB2023020843
SB2023041464
SB2023060525
and 80 more
#VU65206 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30187		 CWE-200 Low
No
No
 9.5.0.7, 10.1.0.5, 10.2.2 12.07.2022 SB2022071250
SB2023112941
SB2024013105
and 2 more


Showing elements 1 - 20 out of 92