Known vulnerabilities in Netcool Operations Insight - page 15

Vendor: IBM Corporation
Software: Netcool Operations Insight
Software CPE: cpe:2.3:a:ibm_corporation:netcool_operations_insight:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 617
Public exploits: 62
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Netcool Operations Insight Netcool Operations Insight is affected by 617 known vulnerabilities: 5 critical, 106 high, 363 medium, 143 low Critical High Medium Low

Vulnerabilities (617)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86073 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2021-25740		 CWE-610 Low
No
No
 1.6.10 05.02.2024 SB2024020523
SB2024022019
SB2024042611
#VU82450 - Exposure of sensitive information to an unauthorized actor
CVE-2023-33955		 CWE-200 Medium
No
No
 1.6.10 26.10.2023 SB2023102619
SB2024020523
#VU79799 - Inefficient Regular Expression Complexity
CVE-2023-26115		 CWE-1333 Medium
No
No
 1.6.10 21.08.2023 SB2023082199
SB20230821104
SB2023082858
and 21 more
#VU76691 - Inefficient Regular Expression Complexity
CVE-2022-25901		 CWE-1333 Medium
No
No
 1.6.10 31.05.2023 SB2023053112
SB2023053113
SB2023053143
and 10 more
#VU72432 - Heap-based Buffer Overflow
CVE-2022-48303		 CWE-122 High
No
No
 1.6.10 21.02.2023 SB2023022105
SB2023022111
SB2023022112
and 72 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916		 CWE-770 Medium
No
No
 1.6.10 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361		 CWE-326 Medium
No
No
 1.6.10 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 1.6.10 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU71586 - Out-of-bounds write
CVE-2022-40152		 CWE-787 Medium
No
No
 1.6.10 26.01.2023 SB2023012669
SB2023012670
SB2023013124
and 52 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 1.6.10 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 1.6.10 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU70119 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-41915		 CWE-113 Medium
No
No
 1.6.10 12.12.2022 SB2022121215
SB2023011210
SB2023013027
and 25 more
#VU64820 - Information Exposure Through Log Files
CVE-2020-8565		 CWE-532 Low
No
No
 1.6.10 30.06.2022 SB2023053114
SB2023103043
SB2024020523
and 10 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647		 CWE-502 Medium
No
No
 1.6.10 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU54854 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-35515		 CWE-835 Medium
No
No
 1.6.10 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 23 more
#VU54852 - Resource exhaustion
CVE-2021-35517		 CWE-400 Medium
No
No
 1.6.10 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 33 more
#VU54851 - Resource exhaustion
CVE-2021-35516		 CWE-400 Medium
No
No
 1.6.10 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 21 more
#VU52000 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-28965		 CWE-611 Medium
No
No
 1.6.10 08.04.2021 SB2021040816
SB2021041365
SB2021042119
and 24 more
#VU23636 - Unprotected Storage of Credentials
CVE-2019-11250		 CWE-256 Low
No
No
 1.6.10 17.12.2019 SB2019082909
SB2019121707
SB2019121704
and 15 more
#VU14441 - Improper input validation
CVE-2018-11771		 CWE-20 Low
No
No
 1.6.10 16.08.2018 SB2018081704
SB2020032701
SB2022072128
and 6 more


Showing elements 281 - 300 out of 617