Known vulnerabilities in Log Analysis - page 4

Software: Log Analysis
Software CPE: cpe:2.3:a:ibm_corporation:log_analysis:*:*:*:*:*:*:*:*
Total vulnerabilities: 200
Public exploits: 27
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Log Analysis Log Analysis is affected by 200 known vulnerabilities: 1 critical, 63 high, 106 medium, 30 low Critical High Medium Low

Vulnerabilities (200)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85351 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50290
CWE-200 Medium
No
No
1.3.8 Fix Pack 1 14.01.2024 SB2024011424
SB2024031814
SB2024061883
#VU80792 - Improper input validation
CVE-2023-36479
CWE-20 Medium
No
No
1.3.8 Fix Pack 1 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167
CWE-444 Medium
No
No
1.3.8 Fix Pack 1 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU80757 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-23064
CWE-79 Medium
No
No
1.3.8 13.09.2023 SB2023091344
SB2023100512
SB2024010320
and 11 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201
CWE-90 Medium
No
No
1.3.8 Fix Pack 1 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77573 - Resource exhaustion
CVE-2023-34462
CWE-400 Medium
No
No
1.3.8 Fix Pack 1 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976
CWE-276 Low
No
No
1.3.8 Fix Pack 1 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU75218 - Resource exhaustion
CVE-2023-26048
CWE-400 Medium
No
No
1.3.8 Fix Pack 1 18.04.2023 SB2023041842
SB2023051753
SB2023060701
and 55 more
#VU75217 - Improper input validation
CVE-2023-26049
CWE-20 Low
No
No
1.3.8 Fix Pack 1 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797
CWE-444 Medium
No
No
1.3.8 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 49 more
#VU59924 - Improper input validation
CVE-2021-37137
CWE-20 Medium
No
No
1.3.8 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 43 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409
CWE-444 Medium
No
No
1.3.8 01.04.2021 SB2021040116
SB2021040626
SB2021050706
and 32 more
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21295
CWE-444 Medium
No
No
1.3.8 01.04.2021 SB2021040115
SB2021040626
SB2021050706
and 26 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290
CWE-312 Low
No
No
1.3.8 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
1.3.8 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27513 - Resource exhaustion
CVE-2020-11612
CWE-400 Medium
No
No
1.3.8 04.05.2020 SB2020050435
SB2020073033
SB2021012210
and 35 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022
CWE-79 Low
Available
No
1.3.8 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU25598 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-20445
CWE-113 Medium
No
No
1.3.8 26.02.2020 SB2020012928
SB2020022601
SB2020031305
and 33 more
#VU22825 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16869
CWE-444 Medium
No
No
1.3.8 18.11.2019 SB2019092616
SB2019111903
SB2019112016
and 30 more
#VU20199 - Resource exhaustion
CVE-2019-9518
CWE-400 Medium
No
No
1.3.8 13.08.2019 SB2019081326
SB2019091011
SB2019091102
and 26 more


Showing elements 61 - 80 out of 200