Known vulnerabilities in Knowledge Catalog Premium Cartridge

Vendor: IBM Corporation
Software: Knowledge Catalog Premium Cartridge
Software CPE: cpe:2.3:a:ibm_corporation:knowledge_catalog_premium_cartridge:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 52
Public exploits: 5
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Knowledge Catalog Premium Cartridge Knowledge Catalog Premium Cartridge is affected by 52 known vulnerabilities: 1 critical, 7 high, 27 medium, 17 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117334 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2025-46653		 CWE-338 Low
No
No
 5.2 17.10.2025 SB2025101708
SB2025101766
SB2025120330
and 4 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889		 CWE-1333 Low
No
No
 5.2 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 34 more
#VU111943 - Improper input validation
CVE-2025-6547		 CWE-20 Medium
No
No
 5.2 25.06.2025 SB2025062533
SB2025062536
SB2025062537
and 10 more
#VU106926 - Resource Management Errors
CVE-2024-57699		 CWE-399 Medium
No
No
 5.2 03.04.2025 SB2025040317
SB2025040325
SB2025040326
and 64 more
#VU105862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-57965		 CWE-79 Medium
No
No
 5.2 19.03.2025 SB2025031916
SB2025031918
SB2025050262
and 14 more
#VU105783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26791		 CWE-79 Low
No
No
 5.2 17.03.2025 SB2025031740
SB2025031741
SB2025031771
and 35 more
#VU105387 - Improper input validation
CVE-2025-27516		 CWE-20 Low
No
No
 5.2 06.03.2025 SB2025030628
SB2025031001
SB2025031002
and 83 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 5.2 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103227 - Use of Insufficiently Random Values
CVE-2025-22150		 CWE-330 Medium
No
No
 5.2 22.01.2025 SB2025012259
SB2025012439
SB2025012440
and 29 more
#VU101972 - Security Features
CVE-2024-56326		 CWE-254 Low
No
No
 5.2 27.12.2024 SB2024122789
SB2024122790
SB2024122791
and 78 more
#VU101971 - Security Features
CVE-2024-56201		 CWE-254 Low
No
No
 5.2 27.12.2024 SB2024122789
SB2025010203
SB2025010322
and 62 more
#VU100676 - Improper Authorization
CVE-2024-38827		 CWE-285 Medium
No
No
 5.2 19.11.2024 SB2024111987
SB2025012185
SB2025012188
and 30 more
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 5.2 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU99267 - Improper Authorization
CVE-2024-38821		 CWE-285 Medium
Available
No
 5.2 23.10.2024 SB2024102307
SB2024112849
SB2024112910
and 13 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 5.2 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 133 more
#VU96018 - Improper input validation
CVE-2024-38809		 CWE-20 Medium
No
No
 5.2 14.08.2024 SB2024081479
SB2024091920
SB2024100804
and 26 more
#VU85240 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-11831		 CWE-79 Medium
No
No
 5.2 09.01.2024 SB2024010997
SB2025021411
SB2025021412
and 17 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 5.2 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU55534 - Improper input validation
CVE-2021-32796		 CWE-20 Medium
No
No
 5.2 03.08.2021 SB2021080308
SB2025082522
SB2025082721
and 4 more
#VU49330 - Insecure Temporary File
CVE-2020-15250		 CWE-377 Low
No
No
 5.2 12.10.2020 SB2020101219
SB2021010712
SB2020110317
and 25 more


Showing elements 1 - 20 out of 52