Known vulnerabilities in Log Analysis 1.3.6.1 - page 2

Vendor: IBM Corporation
Software: Log Analysis
Version: 1.3.6.1
Software CPE: cpe:2.3:a:ibm_corporation:log_analysis:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 122
Public exploits: 17
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Log Analysis version 1.3.6.1 Log Analysis 1.3.6.1 is affected by 122 vulnerabilities: 1 critical, 50 high, 57 medium, 14 low Critical High Medium Low

Vulnerabilities (122)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89221 - Insufficient Verification of Data Authenticity
CVE-2024-34447		 CWE-345 Medium
No
No
 1.3.8 07.05.2024 SB2024050731
SB2024070445
SB2024071844
and 15 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172		 CWE-835 Medium
No
No
 1.3.8 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 1.3.8 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU88977 - Resource exhaustion
CVE-2024-25026		 CWE-400 Medium
No
No
 - 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 - 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354		 CWE-611 High
No
No
 - 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU86988 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50312		 CWE-327 Low
No
No
 - 04.03.2024 SB2024030425
SB2024031819
SB2024032049
and 49 more
#VU86900 - Improper input validation
CVE-2024-21742		 CWE-20 Medium
No
No
 1.3.8 28.02.2024 SB2024022829
SB2024032934
SB2024042476
and 12 more
#VU85874 - Resource exhaustion
CVE-2023-33202		 CWE-400 Medium
No
No
 1.3.8 29.01.2024 SB2024012929
SB2024012930
SB2024013106
and 19 more
#VU63127 - Resource exhaustion
CVE-2021-37136		 CWE-400 Medium
No
No
 1.3.8 12.05.2022 SB2021101948
SB2022051235
SB2022060838
and 36 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 1.3.8 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 49 more
#VU59924 - Improper input validation
CVE-2021-37137		 CWE-20 Medium
No
No
 1.3.8 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 43 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409		 CWE-444 Medium
No
No
 1.3.8 01.04.2021 SB2021040116
SB2021040626
SB2021050706
and 32 more
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21295		 CWE-444 Medium
No
No
 1.3.8 01.04.2021 SB2021040115
SB2021040626
SB2021050706
and 26 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 1.3.8 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more
#VU27513 - Resource exhaustion
CVE-2020-11612		 CWE-400 Medium
No
No
 1.3.8 04.05.2020 SB2020050435
SB2020073033
SB2021012210
and 35 more
#VU25355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20444		 CWE-444 Medium
No
No
 1.3.8 14.02.2020 SB2020012928
SB2020022601
SB2020031305
and 36 more
#VU25353 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-7238		 CWE-444 Medium
No
No
 1.3.8 14.02.2020 SB2020021409
SB2020022521
SB2020022601
and 16 more
#VU22825 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16869		 CWE-444 Medium
No
No
 1.3.8 18.11.2019 SB2019092616
SB2019111903
SB2019112016
and 30 more
#VU20199 - Resource exhaustion
CVE-2019-9518		 CWE-400 Medium
No
No
 1.3.8 13.08.2019 SB2019081326
SB2019091011
SB2019091102
and 26 more


Showing elements 21 - 40 out of 122