Known vulnerabilities in Log Analysis - page 6
Vendor:
IBM Corporation
Software:
Log Analysis
Software CPE:
cpe:2.3:a:ibm_corporation:log_analysis:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
200
Public exploits:
27
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.3.8.3 IF001
1.3.7.2 FP2
1.3.5.2
1.3.5.1
1.3.5.0
1.3.4
1.3.3
1.3.8.3
1.3.8.2 IF001
1.3.8.2
1.3.8.1 IF001
1.3.8.1
1.3.8.0
1.3.8 Fix Pack 1
1.3.8
1.3.7.2 IF003A
1.3.7.2 IF001A
1.3.7.2 IF002
1.3.7.2 IF003
1.3.7 FP2
1.3.7.2 IF001
1.3.7.2 IF004
1.3.7.0
1.3.6.0
1.3.7.2
1.3.7.1
1.3.7
1.3.6.1
1.3.6
1.3.5.3
Vulnerabilities (200)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU71253 - Improper input validation CVE-2022-3510 |
CWE-20 | Medium | 1.3.7 FP2, 1.3.7.2 IF001A | 17.01.2023 |
SB2023011753 SB2023011787 SB2023013027 and 37 more |
||
| #VU69670 - Improper input validation CVE-2022-3509 |
CWE-20 | Medium | 1.3.7 FP2, 1.3.7.2 IF001A | 29.11.2022 |
SB2022111433 SB2022112934 SB2023011787 and 58 more |
||
| #VU69531 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-25168 |
CWE-78 | High | 1.3.7.2 IF001 | 23.11.2022 |
SB2022112314 SB2022112334 SB2022121525 and 10 more |
||
| #VU69293 - Improper input validation CVE-2022-3171 |
CWE-20 | Medium | 1.3.7 FP2, 1.3.7.2 IF001A | 14.11.2022 |
SB2022111433 SB2022111440 SB2022112934 and 105 more |
||
| #VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-34165 |
CWE-444 | Medium | - | 10.11.2022 |
SB2022111029 SB2022111104 SB2022111409 and 58 more |
||
| #VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889 |
CWE-94 | High | 1.3.7.2 IF001 | 14.10.2022 |
SB2022101405 SB2022102709 SB2022110306 and 91 more |
||
| #VU65864 - Improper Control of Generation of Code ('Code Injection') CVE-2022-36364 |
CWE-94 | Medium | 1.3.7.2 IF001, 1.3.7.2 IF002 | 28.07.2022 |
SB2022072832 SB2022122706 SB2023062723 and 3 more |
||
| #VU62082 - Security Features CVE-2022-26612 |
CWE-254 | Medium | 1.3.7.2 IF001 | 12.04.2022 |
SB2022041216 SB2022103132 SB2022112334 and 8 more |
||
| #VU60986 - Improper input validation CVE-2020-28491 |
CWE-20 | Medium | 1.3.7.2 IF003 | 03.03.2022 |
SB2022030316 SB2022030322 SB2022062413 and 12 more |
||
| #VU49368 - Deserialization of Untrusted Data CVE-2020-36179 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 07.01.2021 |
SB2021011105 SB2021042826 SB2021050708 and 18 more |
||
| #VU49369 - Deserialization of Untrusted Data CVE-2020-36180 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 07.01.2021 |
SB2021011105 SB2021042826 SB2021050708 and 16 more |
||
| #VU49374 - Deserialization of Untrusted Data CVE-2020-36185 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 07.01.2021 |
SB2021011105 SB2021042826 SB2021050708 and 16 more |
||
| #VU49375 - Deserialization of Untrusted Data CVE-2020-36186 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 07.01.2021 |
SB2021011105 SB2021042826 SB2021050708 and 16 more |
||
| #VU47105 - Deserialization of Untrusted Data CVE-2020-24750 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 17.09.2020 |
SB2020092506 SB2020100512 SB2021012013 and 28 more |
||
| #VU46305 - Improper Control of Generation of Code ('Code Injection') CVE-2020-24616 |
CWE-94 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 25.08.2020 |
SB2020090706 SB2022060909 SB2022101121 and 14 more |
||
| #VU29128 - Deserialization of Untrusted Data CVE-2020-14195 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 18.06.2020 |
SB2020061806 SB2020070320 SB2020102703 and 24 more |
||
| #VU27924 - Incorrect Default Permissions CVE-2020-1945 |
CWE-276 | Low | 1.3.7 FP2, 1.3.7.2 IF001A | 15.05.2020 |
SB2020051501 SB2020052114 SB2020060205 and 48 more |
||
| #VU26488 - Deserialization of Untrusted Data CVE-2020-11111 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 31.03.2020 |
SB2020030909 SB2020042318 SB2020073033 and 16 more |
||
| #VU19938 - Deserialization of Untrusted Data CVE-2018-11307 |
CWE-502 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 06.08.2019 |
SB2019052407 SB2019091718 SB2019092703 and 17 more |
||
| #VU17778 - Improper input validation CVE-2018-14719 |
CWE-20 | High | 1.3.7.2 IF001, 1.3.7.2 IF002, 1.3.7.2 IF003 | 19.02.2019 |
SB2018121501 SB2019052407 SB2019091718 and 22 more |
Showing elements 101 - 120 out of 200