Known vulnerabilities in Netcool Operations Insight - page 23

Vendor: IBM Corporation
Software: Netcool Operations Insight
Software CPE: cpe:2.3:a:ibm_corporation:netcool_operations_insight:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 617
Public exploits: 62
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Netcool Operations Insight Netcool Operations Insight is affected by 617 known vulnerabilities: 5 critical, 106 high, 363 medium, 143 low Critical High Medium Low

Vulnerabilities (617)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80917 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-8912		 CWE-327 Low
No
No
 1.6.7 20.09.2023 SB2023092025
SB2023102328
SB2024032727
#VU80916 - Observable discrepancy
CVE-2021-29446		 CWE-203 Medium
No
No
 1.6.7 20.09.2023 SB2023092025
SB2023092124
#VU80913 - Observable discrepancy
CVE-2021-29445		 CWE-203 Medium
No
No
 1.6.7 20.09.2023 SB2023092025
SB2023092124
#VU80911 - Missing Authentication for Critical Function
CVE-2022-31176		 CWE-306 High
No
No
 1.6.7 20.09.2023 SB2023092025
SB2024022823
#VU69531 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-25168		 CWE-78 High
No
No
 1.6.7 23.11.2022 SB2022112314
SB2022112334
SB2022121525
and 10 more
#VU68739 - Heap-based Buffer Overflow
CVE-2021-37404		 CWE-122 High
No
No
 1.6.7 26.10.2022 SB2022062017
SB2022102620
SB2023092025
and 3 more
#VU67849 - Use of Insufficiently Random Values
CVE-2022-35255		 CWE-330 Medium
No
No
 1.6.7 03.10.2022 SB2022100401
SB2022100402
SB2022100528
and 40 more
#VU67489 - Resource exhaustion
CVE-2022-34917		 CWE-400 Medium
No
No
 1.6.7 20.09.2022 SB2022092020
SB2022100556
SB2022110304
and 21 more
#VU66757 - Use After Free
CVE-2022-2526		 CWE-416 Medium
No
No
 1.6.7 25.08.2022 SB2022082509
SB2022082511
SB2022082531
and 48 more
#VU66400 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-33987		 CWE-601 Medium
No
No
 1.6.7 11.08.2022 SB2022081124
SB2022081525
SB2022090835
and 22 more
#VU65845 - Authentication Bypass by Spoofing
CVE-2022-22476		 CWE-290 Medium
No
No
 1.6.7 28.07.2022 SB2022072816
SB2022080903
SB2022082228
and 29 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 1.6.7 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU64874 - Improper input validation
CVE-2022-24434		 CWE-20 Medium
No
No
 1.6.7 04.07.2022 SB2022070404
SB2022081027
SB2022093014
and 9 more
#VU64013 - Improper Restriction of Rendered UI Layers or Frames
CVE-2021-46708		 CWE-1021 Medium
No
No
 1.6.7 07.06.2022 SB2022060710
SB2022061603
SB2022061612
and 9 more
#VU63945 - Out-of-bounds read
CVE-2022-1586		 CWE-125 Medium
No
No
 1.6.7 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 71 more
#VU59089 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-3737		 CWE-835 Low
No
No
 1.6.7 22.12.2021 SB2021122214
SB2022050235
SB2022051138
and 58 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428		 CWE-613 Low
No
No
 1.6.7 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more
#VU51878 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28163		 CWE-200 Medium
No
No
 1.6.7 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 27 more
#VU51877 - Improper input validation
CVE-2021-28164		 CWE-20 Medium
Available
No
 1.6.7 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 22 more
#VU38700 - Improper input validation
CVE-2017-1000048		 CWE-20 Medium
No
No
 1.6.7 17.07.2017 SB2017071720
SB2023052313
SB2023092025
and 4 more


Showing elements 441 - 460 out of 617