Known vulnerabilities in Installation Manager

Vendor: IBM Corporation
Software: Installation Manager
Software CPE: cpe:2.3:a:ibm_corporation:installation_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 23
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Installation Manager Installation Manager is affected by 23 known vulnerabilities: 1 high, 16 medium, 6 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112941 - Improper input validation
CVE-2025-30754		 CWE-20 Medium
No
No
 1.9.3.3 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU111137 - Out-of-bounds write
CVE-2025-1471		 CWE-787 Medium
No
No
 1.10.1.2 13.06.2025 SB2025061330
SB2025061331
SB2025062330
and 5 more
#VU111136 - NULL Pointer Dereference
CVE-2025-1470		 CWE-476 Low
No
No
 1.10.1.2 13.06.2025 SB2025061329
SB2025061331
SB2025062330
and 5 more
#VU107520 - Improper input validation
CVE-2025-21587		 CWE-20 Medium
No
No
 1.10.1.2 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 103 more
#VU98518 - Resource exhaustion
CVE-2024-9823		 CWE-400 Medium
No
No
 1.10.1.1 14.10.2024 SB20241014112
SB2024120637
SB2025011709
and 14 more
#VU98517 - Resource exhaustion
CVE-2024-8184		 CWE-400 Medium
No
No
 1.10.1.1 14.10.2024 SB20241014108
SB2024101836
SB2024112849
and 38 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763		 CWE-918 Medium
No
No
 1.10.1.1 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU86808 - Resource exhaustion
CVE-2024-22201		 CWE-400 Medium
No
No
 1.10.1.1 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU86800 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-4218		 CWE-611 Low
No
No
 1.10.1.1 26.02.2024 SB2024022642
SB2024030105
SB2024032906
and 11 more
#VU85469 - Improper input validation
CVE-2024-20952		 CWE-20 Medium
No
No
 1.9.2.8 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU83267 - Improper input validation
CVE-2023-5676		 CWE-20 Low
No
No
 1.9.2.7 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU82583 - Observable discrepancy
CVE-2023-33850		 CWE-203 Medium
No
No
 1.9.2.8 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU82141 - Improper input validation
CVE-2023-22081		 CWE-20 Medium
No
No
 1.9.2.7 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 1.10.1.1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU81726 - Integer overflow
CVE-2023-36478		 CWE-190 Medium
No
No
 1.10.1.1 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80792 - Improper input validation
CVE-2023-36479		 CWE-20 Medium
No
No
 1.10.1.0 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU65832 - Missing release of memory after effective lifetime
CVE-2022-2191		 CWE-401 Medium
No
No
 1.10.1.1 27.07.2022 SB2022072723
SB2022100615
SB2022101891
and 8 more
#VU65831 - Improper input validation
CVE-2022-2047		 CWE-20 Low
No
No
 1.10.1.0 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more
#VU65830 - Resource Management Errors
CVE-2022-2048		 CWE-399 Medium
No
No
 1.10.1.1 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 44 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428		 CWE-613 Low
No
No
 1.10.1.0 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more


Showing elements 1 - 20 out of 23