Known vulnerabilities in Integration Designer - page 5

Vendor: IBM Corporation
Software: Integration Designer
Software CPE: cpe:2.3:a:ibm_corporation:integration_designer:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 100
Public exploits: 18
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Integration Designer Integration Designer is affected by 100 known vulnerabilities: 50 high, 41 medium, 9 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88924 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2008-2025		 CWE-79 Medium
No
No
 - 23.04.2024 SB2024042318
SB2024042504
#VU88923 - Security Features
CVE-2006-1546		 CWE-254 Medium
No
No
 - 23.04.2024 SB2024042318
#VU88920 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2006-1548		 CWE-79 Medium
No
No
 - 23.04.2024 SB2024042318
#VU88919 - Resource exhaustion
CVE-2006-1547		 CWE-400 High
No
Exploited
 - 23.04.2024 SB2024042318
#VU88918 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2005-3745		 CWE-79 Medium
Available
No
 - 23.04.2024 SB2024042318
#VU85469 - Improper input validation
CVE-2024-20952		 CWE-20 Medium
No
No
 - 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU82583 - Observable discrepancy
CVE-2023-33850		 CWE-203 Medium
No
No
 - 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU70524 - Out-of-bounds write
CVE-2022-41854		 CWE-787 Medium
No
No
 - 28.12.2022 SB2022122813
SB2022122926
SB2023010417
and 52 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU68438 - Improper input validation
CVE-2022-21626		 CWE-20 Medium
No
No
 - 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 - 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU65653 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2014-0114		 CWE-470 Medium
Available
Exploited
 - 21.07.2022 SB2022072128
SB2022090131
SB2022120629
and 14 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 - 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU28582 - Improper input validation
CVE-2016-1181		 CWE-20 High
No
No
 - 04.06.2020 SB20200114164
SB20200114165
SB2020071619
and 11 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU19938 - Deserialization of Untrusted Data
CVE-2018-11307		 CWE-502 High
No
No
 - 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 17 more
#VU5233 - Resource exhaustion
CVE-2014-0050		 CWE-400 Medium
Available
No
 - 23.01.2017 SB2014020601
SB2015092620
SB2014041701
and 12 more
#VU197 - Resource exhaustion
CVE-2016-3092		 CWE-400 Medium
No
No
 - 22.07.2016 SB2016070602
SB2016070203
SB2016063002
and 20 more
#VU2803 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-1182		 CWE-79 Low
No
No
 - 30.11.-0001 SB2016040703
SB2023013040
SB2024042318
and 5 more


Showing elements 81 - 100 out of 100