Known vulnerabilities in Jazz Foundation

Software CPE: cpe:2.3:a:ibm_corporation:jazz_foundation:*:*:*:*:*:*:*:*
Total vulnerabilities: 39
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jazz Foundation Jazz Foundation is affected by 39 known vulnerabilities: 7 high, 20 medium, 12 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101051 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-45181
CWE-79 Medium
No
No
7.0.2.0.30 29.11.2024 SB2024112922
#VU101050 - Improper Access Control
CVE-2023-26280
CWE-284 Medium
No
No
7.0.2.0.31, 7.0.3.0.9 29.11.2024 SB2024112921
#VU88977 - Resource exhaustion
CVE-2024-25026
CWE-400 Medium
No
No
- 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354
CWE-611 High
No
No
- 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU86988 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50312
CWE-327 Low
No
No
- 04.03.2024 SB2024030425
SB2024031819
SB2024032049
and 49 more
#VU86224 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24816
CWE-79 Low
Available
No
7.0.2.0.35, 7.0.3.0.17, 7.1.0.0.4 07.02.2024 SB2024020740
SB2024041767
SB20240718122
and 3 more
#VU86222 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24815
CWE-79 Low
No
No
7.0.2.0.35, 7.0.3.0.17, 7.1.0.0.4 07.02.2024 SB2024020740
SB2024111597
SB2025020604
and 1 more
#VU83993 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-46233
CWE-327 Medium
No
No
7.0.2.0.32, 7.0.3.0.11, 7.1.0.0.1 08.12.2023 SB2023120805
SB2023121211
SB2023122252
and 6 more
#VU78333 - Deserialization of Untrusted Data
CVE-2019-13116
CWE-502 High
No
No
7.0.2.0.29 18.07.2023 SB2019101635
SB2024060516
#VU77107 - Incorrect Default Permissions
CVE-2023-2976
CWE-276 Low
No
No
7.0.2.0.29, 7.0.3.0.2 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU65653 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2014-0114
CWE-470 Medium
Available
Exploited
7.0.2.0.29 21.07.2022 SB2022072128
SB2022090131
SB2022120629
and 14 more
#VU62831 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-28890
CWE-611 Medium
No
No
7.0.3, 7.1.0 05.05.2022 SB2022050531
SB2023070408
SB2023100469
and 4 more
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813
CWE-611 Medium
No
No
7.0.2.0.31, 7.0.3.0.8 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more
#VU56669 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-39239
CWE-611 High
No
No
7.0.3, 7.1.0 16.09.2021 SB2021091620
SB2023041243
SB2023070408
and 5 more
#VU55859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-37695
CWE-79 Low
No
No
7.0.2.0.35, 7.0.3.0.17, 7.1.0.0.4 16.08.2021 SB2021081608
SB2022011822
SB2022020113
and 16 more
#VU51511 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13936
CWE-94 High
No
No
7.0.2.0.29 16.03.2021 SB2021031618
SB2021072614
SB2022011911
and 45 more
#VU30113 - Improper input validation
CVE-2020-5258
CWE-20 Low
No
No
7.0.2.0.29, 7.0.3.0.8 16.07.2020 SB2020071699
SB2021072124
SB2021072134
and 17 more
#VU26759 - Improper input validation
CVE-2017-15708
CWE-20 High
No
No
7.0.2.0.29 13.04.2020 SB20200114143
SB2020071666
SB2021071601
and 2 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086
CWE-693 Low
No
No
7.0.2.0.29 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU47859 - Deserialization of Untrusted Data
CVE-2015-4852
CWE-502 High
No
Exploited
7.0.2.0.29 18.11.2015 SB2015111012
SB2024060516
SB2024080102
and 1 more


Showing elements 1 - 20 out of 39