Known vulnerabilities in MobileFirst Platform - page 3

Software CPE: cpe:2.3:a:ibm_corporation:mobilefirst_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 68
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MobileFirst Platform MobileFirst Platform is affected by 68 known vulnerabilities: 12 high, 36 medium, 20 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88957 - Cross-Site Request Forgery (CSRF)
CVE-2014-0054
CWE-352 Medium
No
No
8.0.0.0-MFPF-IF202301121031 24.04.2024 SB2024042406
#VU88954 - Configuration
CVE-2011-2730
CWE-16 Medium
No
No
8.0.0.0-MFPF-IF202301121031 24.04.2024 SB2024042406
#VU88950 - Permissions, Privileges, and Access Controls
CVE-2013-7315
CWE-264 Medium
No
No
8.0.0.0-MFPF-IF202301121031 24.04.2024 SB2024042406
#VU77573 - Resource exhaustion
CVE-2023-34462
CWE-400 Medium
No
No
8.0.0.0-MFPF-IF202309071046 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU77102 - Stack-based buffer overflow
CVE-2022-45688
CWE-121 Medium
No
No
8.0.0.0-MFPF-IF202307260922 08.06.2023 SB2023060836
SB2023060927
SB2023071959
and 35 more
#VU76651 - Resource Management Errors
CVE-2023-2650
CWE-399 Medium
No
No
8.0.0.0-MFPF-IF202307260922 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU74149 - Security Features
CVE-2023-0466
CWE-254 Low
No
No
8.0.0.0-MFPF-IF202307260922 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465
CWE-347 Low
No
No
8.0.0.0-MFPF-IF202307260922 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464
CWE-400 Medium
No
No
8.0.0.0-MFPF-IF202307260922 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Available
No
8.0.0.0-MFPF-IF202304111626 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 203 more
#VU71998 - NULL Pointer Dereference
CVE-2023-0217
CWE-476 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 49 more
#VU71994 - Out-of-bounds read
CVE-2022-4203
CWE-125 Medium
No
No
- 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 47 more
#VU67516 - Command injection
CVE-2021-42740
CWE-77 High
No
No
8.0.0.0-MFPF-IF202301121031 20.09.2022 SB2021102139
SB2022092053
SB2022092054
and 9 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
8.0.0.0-MFPF-IF202304111626 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022
CWE-79 Low
Available
No
8.0.0.0-MFPF-IF202304111626 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU23982 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-20922
CWE-835 Medium
No
No
8.0.0.0-MFPF-IF202301121031 06.01.2020 SB2019103021
SB2021070402
SB2023020928
and 4 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358
CWE-1321 Low
Available
No
8.0.0.0-MFPF-IF202304111626 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251
CWE-79 Low
No
No
8.0.0.0-MFPF-IF202304111626 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more
#VU11753 - Improper Privilege Management
CVE-2018-1272
CWE-269 Low
No
No
8.0.0.0-MFPF-IF202301121031 11.04.2018 SB2018040804
SB2023062703
SB2023102710
and 5 more
#VU312 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2015-3192
CWE-611 High
No
No
8.0.0.0-MFPF-IF202301121031 15.08.2016 SB2016071232
SB2024042406
SB2025021137
and 3 more


Showing elements 41 - 60 out of 68