Known vulnerabilities in Log Analysis 1.3.6.1 - page 6
Vendor:
IBM Corporation
Software:
Log Analysis
Version:
1.3.6.1
Software CPE:
cpe:2.3:a:ibm_corporation:log_analysis:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
122
Public exploits:
17
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
1.3.8.3 IF001
1.3.7.2 FP2
1.3.5.2
1.3.5.1
1.3.5.0
1.3.4
1.3.3
1.3.8.3
1.3.8.2 IF001
1.3.8.2
1.3.8.1 IF001
1.3.8.1
1.3.8.0
1.3.8 Fix Pack 1
1.3.8
1.3.7.2 IF003A
1.3.7.2 IF001A
1.3.7.2 IF002
1.3.7.2 IF003
-
1.3.7 FP2
1.3.7.2 IF001
1.3.7.2 IF004
1.3.7.0
1.3.6.0
1.3.7.2
1.3.7.1
1.3.7
1.3.6.1
1.3.6
1.3.5.3
Vulnerabilities (122)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU67665 - Resource exhaustion CVE-2022-25857 |
CWE-400 | Medium | 1.3.7.2 IF003 | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 83 more |
||
| #VU65845 - Authentication Bypass by Spoofing CVE-2022-22476 |
CWE-290 | Medium | - | 28.07.2022 |
SB2022072816 SB2022080903 SB2022082228 and 29 more |
||
| #VU64197 - Improper Authentication CVE-2022-22475 |
CWE-287 | Low | - | 13.06.2022 |
SB2022061307 SB2022061310 SB2022062218 and 26 more |
||
| #VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437 |
CWE-835 | Medium | 1.3.7 FP2, 1.3.7.2 IF001 | 25.01.2022 |
SB2022012503 SB2022041946 SB2022042249 and 92 more |
||
| #VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832 |
CWE-94 | Medium | 1.3.7.2 | 28.12.2021 |
SB2021122816 SB2021123002 SB2022010601 and 197 more |
||
| #VU52578 - Improper input validation CVE-2017-18640 |
CWE-20 | Medium | 1.3.7.2 IF003 | 26.04.2021 |
SB2021042616 SB2021081922 SB2021060732 and 20 more |
||
| #VU49967 - Deserialization of Untrusted Data CVE-2021-20190 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 19.01.2021 |
SB2021012514 SB2021042826 SB2021050708 and 17 more |
||
| #VU49370 - Deserialization of Untrusted Data CVE-2020-36182 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 07.01.2021 |
SB2021011105 SB2021042826 SB2021050708 and 17 more |
||
| #VU49376 - Deserialization of Untrusted Data CVE-2020-36187 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 07.01.2021 |
SB2021011105 SB2021042826 SB2021050708 and 16 more |
||
| #VU47481 - Improper input validation CVE-2020-13956 |
CWE-20 | Medium | 1.3.7.2 IF003 | 09.10.2020 |
SB2020100902 SB2020101604 SB2021042104 and 77 more |
||
| #VU29130 - Deserialization of Untrusted Data CVE-2020-14062 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 18.06.2020 |
SB2020061806 SB2020070320 SB2020073033 and 14 more |
||
| #VU26494 - Deserialization of Untrusted Data CVE-2020-10673 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 01.04.2020 |
SB2020030909 SB2020073033 SB2022060909 and 17 more |
||
| #VU26491 - Deserialization of Untrusted Data CVE-2020-10968 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 01.04.2020 |
SB2020030909 SB2020042318 SB2020073033 and 15 more |
||
| #VU25830 - Deserialization of Untrusted Data CVE-2020-9546 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 09.03.2020 |
SB2020030909 SB2020071523 SB2020071620 and 31 more |
||
| #VU24272 - Improper Access Control CVE-2019-20330 |
CWE-284 | Low | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 14.01.2020 |
SB2020010309 SB2020032709 SB2020042101 and 18 more |
||
| #VU19933 - Permissions, Privileges, and Access Controls CVE-2019-14379 |
CWE-264 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 05.08.2019 |
SB2019091307 SB2019092703 SB2019100116 and 33 more |
||
| #VU19218 - Improper Access Control CVE-2018-17196 |
CWE-284 | Medium | 1.3.7.2 IF003 | 17.07.2019 |
SB2019071706 SB2020071632 SB2020102845 and 4 more |
||
| #VU19018 - Deserialization of Untrusted Data CVE-2019-12384 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 04.07.2019 |
SB2019091218 SB2019092703 SB2019100116 and 28 more |
||
| #VU17781 - Improper input validation CVE-2018-19362 |
CWE-20 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 19.02.2019 |
SB2018121501 SB2019052407 SB2019091718 and 38 more |
||
| #VU9750 - Exposure of sensitive information to an unauthorized actor CVE-2017-13098 |
CWE-200 | Low | 1.3.7.2 IF003 | 22.12.2017 |
SB2017121312 SB2020050421 SB2018072803 and 5 more |
Showing elements 101 - 120 out of 122