Known vulnerabilities in Operational Decision Manager - page 5

Vendor: IBM Corporation
Software: Operational Decision Manager
Software CPE: cpe:2.3:a:ibm_corporation:operational_decision_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 188
Public exploits: 20
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Operational Decision Manager Operational Decision Manager is affected by 188 known vulnerabilities: 1 critical, 23 high, 114 medium, 50 low Critical High Medium Low

Vulnerabilities (188)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89626 - NULL Pointer Dereference
CVE-2022-25867		 CWE-476 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 17.05.2024 SB2024051717
#VU88365 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-1932		 CWE-79 Medium
No
No
 8.10.5.1 Interim fix 54, 8.11.0.1 Interim fix 29, 8.11.1 Interim fix 21, 8.12.0.1 Interim fix 3 10.04.2024 SB2024041019
SB2025031132
SB2025112459
and 1 more
#VU86635 - Unrestricted Upload of File with Dangerous Type
CVE-2023-50386		 CWE-434 Medium
Available
No
 8.10.5.1 Interim fix 54, 8.11.0.1 Interim fix 29, 8.11.1 Interim fix 21, 8.12.0.1 Interim fix 3 20.02.2024 SB2024022041
SB2024041019
SB2024041643
and 3 more
#VU86633 - Incorrect Permission Assignment for Critical Resource
CVE-2023-50292		 CWE-732 High
No
No
 8.10.5.1 Interim fix 54, 8.11.0.1 Interim fix 29, 8.11.1 Interim fix 21, 8.12.0.1 Interim fix 3 20.02.2024 SB2024022039
SB2024041019
SB2024082816
and 1 more
#VU86632 - Insufficiently Protected Credentials
CVE-2023-50291		 CWE-522 Low
No
No
 8.10.5.1 Interim fix 54, 8.11.0.1 Interim fix 29, 8.11.1 Interim fix 21, 8.12.0.1 Interim fix 3 20.02.2024 SB2024022039
SB2024041019
SB2024082816
and 1 more
#VU86631 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50298		 CWE-200 Medium
No
No
 8.10.5.1 Interim fix 54, 8.11.0.1 Interim fix 29, 8.11.1 Interim fix 21, 8.12.0.1 Interim fix 3 20.02.2024 SB2024022040
SB2024041019
SB2024082816
and 2 more
#VU82122 - Improper input validation
CVE-2023-35116		 CWE-20 Low
No
No
 8.10.5.1 Interim fix 54, 8.11.0.1 Interim fix 29, 8.11.1 Interim fix 21, 8.12.0.1 Interim fix 3 17.10.2023 SB2023101771
SB20231018117
SB2023101925
and 45 more
#VU75408 - Security Features
CVE-2023-20862		 CWE-254 Medium
No
No
 8.10.5.1 Interim fix 36, 8.11.0.1 Interim fix 17, 8.11.0.1 Interim fix 18, 8.11.1 Interim fix 7 21.04.2023 SB2023042130
SB2023042132
SB2023053121
and 20 more
#VU75218 - Resource exhaustion
CVE-2023-26048		 CWE-400 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 18.04.2023 SB2023041842
SB2023051753
SB2023060701
and 55 more
#VU75217 - Improper input validation
CVE-2023-26049		 CWE-20 Low
No
No
 8.10.5.1 Interim fix 36, 8.11.0.1 Interim fix 17, 8.11.0.1 Interim fix 18, 8.11.1 Interim fix 7 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2007-4559		 CWE-22 High
Available
No
 8.10.5.1 Interim fix 54, 8.11.0.1 Interim fix 29, 8.11.1 Interim fix 21, 8.12.0.1 Interim fix 3 22.09.2022 SB2007082801
SB2022120206
SB2023060825
and 68 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU52578 - Improper input validation
CVE-2017-18640		 CWE-20 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 26.04.2021 SB2021042616
SB2021081922
SB2021060732
and 20 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU19018 - Deserialization of Untrusted Data
CVE-2019-12384		 CWE-502 High
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 04.07.2019 SB2019091218
SB2019092703
SB2019100116
and 28 more
#VU18961 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12814		 CWE-200 Medium
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 02.07.2019 SB2019062606
SB2019092703
SB2019100116
and 25 more
#VU12886 - Uncontrolled Memory Allocation
CVE-2018-10237		 CWE-789 Low
No
No
 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5 21.05.2018 SB2018052310
SB2018083005
SB2018092411
and 43 more


Showing elements 81 - 100 out of 188