Known vulnerabilities in Log Analysis 1.3.6.1 - page 3

Software: Log Analysis
Version: 1.3.6.1
Software CPE: cpe:2.3:a:ibm_corporation:log_analysis:*:*:*:*:*:*:*:*
Total vulnerabilities: 122
Public exploits: 17
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Log Analysis version 1.3.6.1 Log Analysis 1.3.6.1 is affected by 122 vulnerabilities: 1 critical, 50 high, 57 medium, 14 low Critical High Medium Low

Vulnerabilities (122)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201
CWE-90 Medium
No
No
1.3.8 Fix Pack 1 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU75645 - Integer overflow
CVE-2018-18928
CWE-190 High
No
No
1.3.8 02.05.2023 SB2023050209
SB2023100524
SB2023120172
and 1 more
#VU70042 - NULL Pointer Dereference
CVE-2022-23476
CWE-476 Medium
No
No
1.3.8 08.12.2022 SB2022120804
SB2023120175
SB2024080760
and 2 more
#VU69583 - Improper input validation
CVE-2022-29181
CWE-20 Medium
No
No
1.3.8 24.11.2022 SB2022112433
SB2022112434
SB2022112435
and 12 more
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165
CWE-444 Medium
No
No
- 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU65864 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-36364
CWE-94 Medium
No
No
1.3.7.2 IF001, 1.3.7.2 IF002 28.07.2022 SB2022072832
SB2022122706
SB2023062723
and 3 more
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813
CWE-611 Medium
No
No
1.3.8 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more
#VU60986 - Improper input validation
CVE-2020-28491
CWE-20 Medium
No
No
1.3.7.2 IF003 03.03.2022 SB2022030316
SB2022030322
SB2022062413
and 12 more
#VU49368 - Deserialization of Untrusted Data
CVE-2020-36179
CWE-502 High
No
No
1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 18 more
#VU49369 - Deserialization of Untrusted Data
CVE-2020-36180
CWE-502 High
Public exploit available
No
1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 16 more
#VU49374 - Deserialization of Untrusted Data
CVE-2020-36185
CWE-502 High
No
No
1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 16 more
#VU49375 - Deserialization of Untrusted Data
CVE-2020-36186
CWE-502 High
No
No
1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 16 more
#VU47105 - Deserialization of Untrusted Data
CVE-2020-24750
CWE-502 High
Public exploit available
No
1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 17.09.2020 SB2020092506
SB2020100512
SB2021012013
and 28 more
#VU46305 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-24616
CWE-94 High
Public exploit available
No
1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 25.08.2020 SB2020090706
SB2022060909
SB2022101121
and 14 more
#VU29128 - Deserialization of Untrusted Data
CVE-2020-14195
CWE-502 High
Public exploit available
No
1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 18.06.2020 SB2020061806
SB2020070320
SB2020102703
and 24 more
#VU26488 - Deserialization of Untrusted Data
CVE-2020-11111
CWE-502 High
No
No
1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 31.03.2020 SB2020030909
SB2020042318
SB2020073033
and 16 more
#VU25598 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-20445
CWE-113 Medium
No
No
1.3.8 26.02.2020 SB2020012928
SB2020022601
SB2020031305
and 33 more
#VU19938 - Deserialization of Untrusted Data
CVE-2018-11307
CWE-502 High
No
No
1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 17 more
#VU17778 - Improper input validation
CVE-2018-14719
CWE-20 High
No
No
1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 22 more
#VU17776 - Server-Side Request Forgery (SSRF)
CVE-2018-14721
CWE-918 Low
No
No
1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 23 more


Showing elements 41 - 60 out of 122