Known vulnerabilities in Integration Designer - page 2

Vendor: IBM Corporation
Software: Integration Designer
Software CPE: cpe:2.3:a:ibm_corporation:integration_designer:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 100
Public exploits: 18
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Integration Designer Integration Designer is affected by 100 known vulnerabilities: 50 high, 41 medium, 9 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88924 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2008-2025		 CWE-79 Medium
No
No
 - 23.04.2024 SB2024042318
SB2024042504
SB2026101926
#VU88923 - Security Features
CVE-2006-1546		 CWE-254 Medium
No
No
 - 23.04.2024 SB2024042318
SB2026101926
#VU88920 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2006-1548		 CWE-79 Medium
No
No
 - 23.04.2024 SB2024042318
SB2026101926
#VU88919 - Resource exhaustion
CVE-2006-1547		 CWE-400 High
No
Exploited
 - 23.04.2024 SB2024042318
SB2026101926
#VU88918 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2005-3745		 CWE-79 Medium
Available
No
 - 23.04.2024 SB2024042318
SB2026101926
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU69809 - Out-of-bounds write
CVE-2022-42920		 CWE-787 High
No
No
 - 01.12.2022 SB2022120151
SB2022120154
SB2022120628
and 56 more
#VU67666 - Stack-based buffer overflow
CVE-2022-38749		 CWE-121 Medium
No
No
 - 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 51 more
#VU65653 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2014-0114		 CWE-470 Medium
Available
Exploited
 - 21.07.2022 SB2022072128
SB2022090131
SB2022120629
and 16 more
#VU47105 - Deserialization of Untrusted Data
CVE-2020-24750		 CWE-502 High
Available
No
 - 17.09.2020 SB2020092506
SB2020100512
SB2021012013
and 28 more
#VU46305 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-24616		 CWE-94 High
Available
No
 - 25.08.2020 SB2020090706
SB2022060909
SB2022101121
and 14 more
#VU28582 - Improper input validation
CVE-2016-1181		 CWE-20 High
No
No
 - 04.06.2020 SB20200114164
SB20200114165
SB2020071619
and 12 more
#VU26490 - Deserialization of Untrusted Data
CVE-2020-11113		 CWE-502 High
Available
No
 - 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 17 more
#VU25833 - Deserialization of Untrusted Data
CVE-2019-14892		 CWE-502 High
No
No
 - 09.03.2020 SB2020030911
SB2020031901
SB2022060909
and 16 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 114 more
#VU19938 - Deserialization of Untrusted Data
CVE-2018-11307		 CWE-502 High
No
No
 - 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 18 more
#VU17779 - Improper input validation
CVE-2018-19361		 CWE-20 High
No
No
 - 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 24 more
#VU17053 - Permissions, Privileges, and Access Controls
CVE-2018-14718		 CWE-264 High
No
No
 - 17.01.2019 SB2019011703
SB2019052407
SB2019091718
and 30 more
#VU9754 - Improper input validation
CVE-2015-0899		 CWE-20 Low
No
No
 - 26.12.2017 SB2016033101
SB2023013025
SB2024042318
and 5 more
#VU2803 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-1182		 CWE-79 Low
No
No
 - 30.11.-0001 SB2016040703
SB2023013040
SB2024042318
and 6 more


Showing elements 21 - 40 out of 100