Known vulnerabilities in Operational Decision Manager - page 10

Vendor: IBM Corporation
Software: Operational Decision Manager
Software CPE: cpe:2.3:a:ibm_corporation:operational_decision_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 188
Public exploits: 20
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Operational Decision Manager Operational Decision Manager is affected by 188 known vulnerabilities: 1 critical, 23 high, 114 medium, 50 low Critical High Medium Low

Vulnerabilities (188)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 8.10.5.1 Interim fix 33, 8.11.0.1 Interim fix 15, 8.11.1 Interim fix 4 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU65653 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2014-0114		 CWE-470 Medium
Available
Exploited
 8.10.5.1 Interim fix 33, 8.11.0.1 Interim fix 15, 8.11.1 Interim fix 4 21.07.2022 SB2022072128
SB2022090131
SB2022120629
and 14 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 - 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 8.10.5.1 Interim fix 33, 8.11.0.1 Interim fix 15, 8.11.1 Interim fix 4 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU16725 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1821		 CWE-611 Low
Available
No
 8.6.0.3, 8.7.1.2, 8.8.1.3, 8.9.2.1 27.12.2018 SB2018122703
#VU41703 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0944		 CWE-79 Low
No
No
 - 09.05.2014 SB2014050901
#VU41704 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0945		 CWE-79 Low
No
No
 - 09.05.2014 SB2014050901
#VU41705 - Exposure of sensitive information to an unauthorized actor
CVE-2014-0946		 CWE-200 Low
No
No
 - 09.05.2014 SB2014050901


Showing elements 181 - 200 out of 188