Known vulnerabilities in Netcool Operations Insight - page 16

Vendor: IBM Corporation
Software: Netcool Operations Insight
Software CPE: cpe:2.3:a:ibm_corporation:netcool_operations_insight:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 617
Public exploits: 62
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Netcool Operations Insight Netcool Operations Insight is affected by 617 known vulnerabilities: 5 critical, 106 high, 363 medium, 143 low Critical High Medium Low

Vulnerabilities (617)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85298 - Argument Injection or Modification
CVE-2021-43809		 CWE-88 Low
No
No
 1.6.10 11.01.2024 SB2024011117
SB2024020523
SB2021123107
and 7 more
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642		 CWE-770 Medium
No
No
 1.6.11 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635		 CWE-681 Medium
No
No
 1.6.11 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU79928 - Deserialization of Untrusted Data
CVE-2023-34040		 CWE-502 Medium
Available
No
 1.6.11 23.08.2023 SB2023082369
SB2023110816
SB2023121130
and 3 more
#VU76605 - Uncaught Exception
CVE-2023-2251		 CWE-248 Medium
No
No
 1.6.10 29.05.2023 SB2023052918
SB2023060126
SB2023062140
and 9 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 1.6.10 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 1.6.10 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215		 CWE-416 Medium
No
No
 1.6.10 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 1.6.10 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 1.6.11 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 1.6.10 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU69615 - Resource exhaustion
CVE-2022-36083		 CWE-400 Medium
No
No
 1.6.10 25.11.2022 SB2022112520
SB2022112521
SB2022113025
and 3 more
#VU67554 - Server-Side Request Forgery (SSRF)
CVE-2022-3172		 CWE-918 Medium
No
No
 1.6.10 21.09.2022 SB2022092138
SB2022102614
SB2023011939
and 23 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160		 CWE-79 Low
No
No
 1.6.11 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU62512 - Improper input validation
CVE-2021-3572		 CWE-20 Medium
No
No
 1.6.11 22.04.2022 SB2022042257
SB2022042259
SB2021071390
and 51 more
#VU58272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41182		 CWE-79 Medium
No
No
 1.6.11 20.11.2021 SB2021112002
SB2022011944
SB2022011946
and 32 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 1.6.11 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU58270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41183		 CWE-79 Medium
No
No
 1.6.11 20.11.2021 SB2021112002
SB2022011943
SB2022011944
and 33 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 1.6.11 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU48600 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-20916		 CWE-22 Medium
No
No
 1.6.11 04.09.2020 SB2020090420
SB2020112328
SB2020122208
and 29 more


Showing elements 301 - 320 out of 617