Known vulnerabilities in InfoSphere Master Data Management - page 3

Vendor: IBM Corporation
Software: InfoSphere Master Data Management
Software CPE: cpe:2.3:a:ibm_corporation:infosphere_master_data_management:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 51
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting InfoSphere Master Data Management InfoSphere Master Data Management is affected by 51 known vulnerabilities: 2 critical, 5 high, 32 medium, 12 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165		 CWE-444 Medium
No
No
 - 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU68375 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-38712		 CWE-451 Medium
No
No
 - 18.10.2022 SB2022101803
SB2022111011
SB2022122019
and 6 more
#VU67711 - Server-Side Request Forgery (SSRF)
CVE-2022-35282		 CWE-918 Medium
No
No
 - 28.09.2022 SB2022092811
SB2022111018
SB2022122018
and 4 more
#VU67213 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34336		 CWE-79 Medium
No
No
 - 13.09.2022 SB2022091320
SB2022111013
SB2023011123
and 2 more
#VU59281 - Resource exhaustion
CVE-2021-38951		 CWE-400 High
No
No
 - 06.01.2022 SB2022010631
SB2022010632
SB2022021421
and 2 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 - 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU50745 - Improper input validation
CVE-2021-23840		 CWE-20 Medium
No
No
 - 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU50744 - Cryptographic Issues
CVE-2021-23839		 CWE-310 Low
No
No
 - 17.02.2021 SB2021021702
SB2021041501
SB2021041502
and 15 more
#VU50740 - NULL Pointer Dereference
CVE-2021-23841		 CWE-476 Medium
No
No
 - 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 66 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 - 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU46686 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4578		 CWE-79 Low
No
No
 - 14.09.2020 SB2020091420
SB2022021422


Showing elements 41 - 60 out of 51