Known vulnerabilities in Log Analysis - page 10

Vendor: IBM Corporation
Software: Log Analysis
Software CPE: cpe:2.3:a:ibm_corporation:log_analysis:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 200
Public exploits: 27
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Log Analysis Log Analysis is affected by 200 known vulnerabilities: 1 critical, 63 high, 106 medium, 30 low Critical High Medium Low

Vulnerabilities (200)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65845 - Authentication Bypass by Spoofing
CVE-2022-22476		 CWE-290 Medium
No
No
 - 28.07.2022 SB2022072816
SB2022080903
SB2022082228
and 29 more
#VU65831 - Improper input validation
CVE-2022-2047		 CWE-20 Low
No
No
 1.3.7.2 IF001, 1.3.7.2 IF002 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more
#VU64724 - Incorrect Regular Expression
CVE-2022-33879		 CWE-185 Medium
No
No
 1.3.7 FP2, 1.3.7.2 IF001 28.06.2022 SB2022062801
SB2022072805
SB2022092035
and 18 more
#VU64197 - Improper Authentication
CVE-2022-22475		 CWE-287 Low
No
No
 - 13.06.2022 SB2022061307
SB2022061310
SB2022062218
and 26 more
#VU63904 - Improper input validation
CVE-2022-30973		 CWE-20 Medium
No
No
 1.3.7 FP2, 1.3.7.2 IF001 01.06.2022 SB2022060114
SB2022072805
SB2022092035
and 6 more
#VU60181 - Resource Management Errors
CVE-2021-22569		 CWE-399 Medium
Available
No
 1.3.7.2 IF001 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 1.3.7 FP2, 1.3.7.2 IF001 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493		 CWE-502 High
No
No
 1.3.7.2 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302		 CWE-502 High
No
No
 1.3.7.2 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 1.3.7.2 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 1.3.7.2 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 1.3.7.2 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 1.3.7.2 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 - 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU56790 - Information Exposure Through Timing Discrepancy
CVE-2021-38153		 CWE-208 Low
No
No
 1.3.7 FP2, 1.3.7.2 IF003 21.09.2021 SB2021092116
SB2022010906
SB2022012104
and 21 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 1.3.7.2 IF004 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU27960 - Deserialization of Untrusted Data
CVE-2019-17571		 CWE-502 High
No
No
 1.3.7.2 18.05.2020 SB2019122027
SB2020051806
SB2020011497
and 28 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488		 CWE-295 Low
No
No
 1.3.7.2 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more
#VU36773 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2018-15494		 CWE-74 High
No
No
 - 18.08.2018 SB2018081804
SB2022070505
SB2022082433
and 11 more
#VU12420 - Permissions, Privileges, and Access Controls
CVE-2018-1313		 CWE-264 Low
No
No
 1.3.7.2 IF004 08.05.2018 SB2018050809
SB2022110302
SB2023040530
and 8 more


Showing elements 181 - 200 out of 200