Known vulnerabilities in Operational Decision Manager - page 4

Vendor: IBM Corporation
Software: Operational Decision Manager
Software CPE: cpe:2.3:a:ibm_corporation:operational_decision_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 188
Public exploits: 20
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Operational Decision Manager Operational Decision Manager is affected by 188 known vulnerabilities: 1 critical, 23 high, 114 medium, 50 low Critical High Medium Low

Vulnerabilities (188)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89623 - Allocation of Resources Without Limits or Throttling
CVE-2019-16770		 CWE-770 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 17.05.2024 SB2024051717
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU87510 - Improper input validation
CVE-2024-24549		 CWE-20 Medium
Available
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU86695 - Server-Side Request Forgery (SSRF)
CVE-2024-22243		 CWE-918 Medium
Available
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 21.02.2024 SB2024022140
SB2024030406
SB2024030529
and 45 more
#VU85618 - Deserialization of Untrusted Data
CVE-2023-6378		 CWE-502 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 19.01.2024 SB2024011926
SB2024011927
SB2024012316
and 39 more
#VU74063 - Memory corruption
CVE-2023-23540		 CWE-119 Low
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 27.03.2023 SB2023032762
SB2023032765
SB2023032801
and 2 more
#VU71181 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23541		 CWE-327 High
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 16 more
#VU71180 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23539		 CWE-327 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 16 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752		 CWE-121 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more
#VU59053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42550		 CWE-94 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 19.12.2021 SB2021121904
SB2022022307
SB2022032929
and 21 more
#VU55264 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-19919		 CWE-94 Low
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 22.07.2021 SB2019122104
SB2021072292
SB2023020928
and 7 more
#VU52502 - Improper input validation
CVE-2020-27218		 CWE-20 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 23.04.2021 SB2021042305
SB2021042635
SB2021063002
and 15 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27216		 CWE-362 Low
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 23.10.2020 SB2020121307
SB2020121308
SB2021012011
and 27 more
#VU47481 - Improper input validation
CVE-2020-13956		 CWE-20 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more
#VU26320 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10241		 CWE-79 Low
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 23.03.2020 SB2020032710
SB2020072802
SB2020121701
and 14 more
#VU25067 - Improper input validation
CVE-2019-10247		 CWE-20 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 07.02.2020 SB2020011489
SB2020032710
SB2020042110
and 25 more
#VU13530 - Exposure of sensitive information to an unauthorized actor
CVE-2018-12536		 CWE-200 Low
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 02.07.2018 SB2018070205
SB2022032830
SB2022032831
and 8 more
#VU13531 - Session Fixation
CVE-2018-12538		 CWE-384 Low
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 29.06.2018 SB2018070205
SB2024051717
SB2024110830
and 2 more
#VU11301 - Improper Access Control
CVE-2018-8088		 CWE-284 Low
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 28.03.2018 SB2018022112
SB2018032813
SB2018032817
and 27 more


Showing elements 61 - 80 out of 188