Known vulnerabilities in Log Analysis - page 2

Vendor: IBM Corporation
Software: Log Analysis
Software CPE: cpe:2.3:a:ibm_corporation:log_analysis:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 200
Public exploits: 27
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Log Analysis Log Analysis is affected by 200 known vulnerabilities: 1 critical, 63 high, 106 medium, 30 low Critical High Medium Low

Vulnerabilities (200)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103325 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-52012		 CWE-22 Medium
No
No
 1.3.8.2 27.01.2025 SB2025012737
SB2025041544
SB2026022019
#VU103324 - Permissions, Privileges, and Access Controls
CVE-2025-24814		 CWE-264 Low
No
No
 1.3.8.2 27.01.2025 SB2025012737
SB2025041544
SB2025071613
and 1 more
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141		 CWE-200 Medium
No
No
 1.3.8.1 21.11.2024 SB2024112150
SB2024120226
SB2024120331
and 34 more
#VU98518 - Resource exhaustion
CVE-2024-9823		 CWE-400 Medium
No
No
 1.3.8.2 14.10.2024 SB20241014112
SB2024120637
SB2025011709
and 14 more
#VU98137 - Allocation of Resources Without Limits or Throttling
CVE-2024-40094		 CWE-770 Medium
Available
No
 - 08.10.2024 SB2024100835
SB2024100936
SB2024101593
and 27 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 1.3.8.2 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU97643 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-45614		 CWE-444 Medium
No
No
 1.3.8.2 23.09.2024 SB2024092330
SB2024092459
SB2024092476
and 9 more
#VU89219 - Observable discrepancy
CVE-2024-30171		 CWE-203 Medium
No
No
 1.3.8.2 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU88977 - Resource exhaustion
CVE-2024-25026		 CWE-400 Medium
No
No
 - 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 - 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU87570 - Improper Access Control
CVE-2024-23944		 CWE-284 Low
No
No
 1.3.8.2 15.03.2024 SB2024031533
SB2024052921
SB2024061902
and 23 more
#VU86900 - Improper input validation
CVE-2024-21742		 CWE-20 Medium
No
No
 1.3.8 28.02.2024 SB2024022829
SB2024032934
SB2024042476
and 12 more
#VU86635 - Unrestricted Upload of File with Dangerous Type
CVE-2023-50386		 CWE-434 Medium
Available
No
 1.3.8.2 20.02.2024 SB2024022041
SB2024041019
SB2024041643
and 3 more
#VU86633 - Incorrect Permission Assignment for Critical Resource
CVE-2023-50292		 CWE-732 High
No
No
 1.3.8.2 20.02.2024 SB2024022039
SB2024041019
SB2024082816
and 1 more
#VU86632 - Insufficiently Protected Credentials
CVE-2023-50291		 CWE-522 Low
No
No
 1.3.8.2 20.02.2024 SB2024022039
SB2024041019
SB2024082816
and 1 more
#VU86631 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50298		 CWE-200 Medium
No
No
 1.3.8.2 20.02.2024 SB2024022040
SB2024041019
SB2024082816
and 2 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 1.3.8.1 IF001 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 1.3.8.1 IF001 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU85874 - Resource exhaustion
CVE-2023-33202		 CWE-400 Medium
No
No
 1.3.8 29.01.2024 SB2024012929
SB2024012930
SB2024013106
and 19 more
#VU85848 - Resource exhaustion
CVE-2023-6481		 CWE-400 Medium
No
No
 1.3.8.1 IF001 29.01.2024 SB2024012902
SB2024020727
SB2024020840
and 23 more


Showing elements 21 - 40 out of 200