Known vulnerabilities in Log Analysis

Vendor: IBM Corporation
Software: Log Analysis
Software CPE: cpe:2.3:a:ibm_corporation:log_analysis:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 200
Public exploits: 27
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Log Analysis Log Analysis is affected by 200 known vulnerabilities: 1 critical, 63 high, 106 medium, 30 low Critical High Medium Low

Vulnerabilities (200)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121007 - Exposure of sensitive information to an unauthorized actor
CVE-2025-66566		 CWE-200 Medium
No
No
 1.3.8.3 IF001 07.01.2026 SB2026010702
SB2026010705
SB2026010706
and 28 more
#VU121006 - Out-of-bounds read
CVE-2025-12183		 CWE-125 Medium
No
No
 1.3.8.3 IF001 07.01.2026 SB2026010701
SB2026010705
SB2026010706
and 14 more
#VU115571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-36000		 CWE-79 Low
No
No
 1.3.8.2 16.09.2025 SB20250916311
SB20250916316
SB2025092515
and 25 more
#VU115568 - Allocation of Resources Without Limits or Throttling
CVE-2025-36047		 CWE-770 Medium
No
No
 1.3.8.2 16.09.2025 SB20250916312
SB20250916316
SB20250916321
and 29 more
#VU114434 - Deserialization of Untrusted Data
CVE-2025-27819		 CWE-502 High
No
No
 1.3.8.1 26.08.2025 SB2025082612
SB2025082623
SB2025100118
and 4 more
#VU114006 - Privilege Chaining
CVE-2025-36124		 CWE-268 High
No
No
 1.3.8.2 13.08.2025 SB2025081354
SB2025082918
SB2025082921
and 23 more
#VU113074 - Stack-based buffer overflow
CVE-2025-36097		 CWE-121 High
No
No
 - 18.07.2025 SB20250718100
SB2025072128
SB2025072307
and 43 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 1.3.8.2 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU105112 - Resource exhaustion
CVE-2025-23184		 CWE-400 Medium
No
No
 - 28.02.2025 SB2025022807
SB2025030340
SB2025041017
and 40 more
#VU103769 - Resource exhaustion
CVE-2025-25193		 CWE-400 Low
No
No
 - 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 56 more
#VU101829 - Improper Authentication
CVE-2024-56128		 CWE-287 Medium
No
No
 1.3.8.1 18.12.2024 SB2024121826
SB2025041647
SB2025041651
and 12 more
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 - 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU97712 - Incorrect Default Permissions
CVE-2024-23454		 CWE-276 Low
No
No
 1.3.8.2 26.09.2024 SB2024092604
SB20241108105
SB20241108106
and 14 more
#VU77778 - Improper input validation
CVE-2022-29546		 CWE-20 Low
No
No
 1.3.8.1 28.06.2023 SB2022050443
SB20230719104
SB20231018117
and 10 more
#VU77777 - Improper input validation
CVE-2022-28366		 CWE-20 Low
No
No
 1.3.8.1 28.06.2023 SB2022042155
SB2023112475
SB2023121271
and 7 more
#VU72123 - Deserialization of Untrusted Data
CVE-2023-25194		 CWE-502 Low
Available
No
 1.3.8.1 11.02.2023 SB2023021101
SB2023030952
SB2023040419
and 40 more
#VU65486 - Improper input validation
CVE-2022-24839		 CWE-20 Medium
No
No
 1.3.8.1 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU55579 - Resource exhaustion
CVE-2021-23413		 CWE-400 Medium
No
No
 1.3.8.3 04.08.2021 SB2021080408
SB2022081837
SB20230418118
and 4 more
#VU50684 - Improper input validation
CVE-2020-13949		 CWE-20 Medium
No
No
 1.3.7.2 FP2 15.02.2021 SB2021021505
SB2021022701
SB2021030911
and 13 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 1.3.8.2 IF001 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more


Showing elements 1 - 20 out of 200