Known vulnerabilities in Operational Decision Manager - page 6

Vendor: IBM Corporation
Software: Operational Decision Manager
Software CPE: cpe:2.3:a:ibm_corporation:operational_decision_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 188
Public exploits: 20
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Operational Decision Manager Operational Decision Manager is affected by 188 known vulnerabilities: 1 critical, 23 high, 114 medium, 50 low Critical High Medium Low

Vulnerabilities (188)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86821 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2009-2625		 CWE-835 Medium
No
No
 8.10.5.1 Interim fix 36, 8.11.0.1 Interim fix 17, 8.11.0.1 Interim fix 18, 8.11.1 Interim fix 7 27.02.2024 SB2024022724
SB2024030723
SB2024030833
and 12 more
#VU86043 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2024-22319		 CWE-90 High
No
No
 8.10.5.1 Interim fix 51, 8.11.0.1 Interim fix 27, 8.11.1 Interim fix 19, 8.12.0.1 Interim fix 1 02.02.2024 SB2024020233
SB2024040813
#VU86042 - Deserialization of Untrusted Data
CVE-2024-22320		 CWE-502 High
No
No
 8.10.5.1 Interim fix 51, 8.11.0.1 Interim fix 27, 8.11.1 Interim fix 19, 8.12.0.1 Interim fix 1 02.02.2024 SB2024020233
SB2024040813
#VU84037 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-34062		 CWE-22 Medium
No
No
 8.10.5.1 Interim fix 51, 8.11.0.1 Interim fix 27, 8.11.1 Interim fix 19, 8.12.0.1 Interim fix 1 11.12.2023 SB2023121107
SB2024013141
SB2024020233
and 6 more
#VU83581 - Improper input validation
CVE-2023-34055		 CWE-20 Medium
No
No
 8.10.5.1 Interim fix 51, 8.11.0.1 Interim fix 27, 8.11.1 Interim fix 19, 8.12.0.1 Interim fix 1 29.11.2023 SB2023112967
SB2024011660
SB2024011661
and 22 more
#VU83580 - Improper input validation
CVE-2023-34054		 CWE-20 Medium
No
No
 8.10.5.1 Interim fix 51, 8.11.0.1 Interim fix 27, 8.11.1 Interim fix 19, 8.12.0.1 Interim fix 1 29.11.2023 SB2023112965
SB2024013141
SB2024020233
and 6 more
#VU82534 - Resource exhaustion
CVE-2013-4002		 CWE-400 Medium
No
No
 8.10.5.1 Interim fix 36, 8.11.0.1 Interim fix 17, 8.11.0.1 Interim fix 18, 8.11.1 Interim fix 7 27.10.2023 SB2023102710
SB2023102722
SB2023103009
and 14 more
#VU82350 - Resource Management Errors
CVE-2023-46158		 CWE-399 Medium
No
No
 8.10.5.1 Interim fix 53, 8.11.0.1 Interim fix 28, 8.11.1 Interim fix 20, 8.12.0.1 Interim fix 2 24.10.2023 SB2023102444
SB2023120144
SB2023122104
and 30 more
#VU79878 - Incorrect Authorization
CVE-2023-3899		 CWE-863 Low
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 23.08.2023 SB2023082308
SB2023082309
SB2023082310
and 44 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU76042 - Security Features
CVE-2023-2455		 CWE-254 Low
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 61 more
#VU75409 - Improper input validation
CVE-2023-20863		 CWE-20 Medium
No
No
 8.10.5.1 Interim fix 36, 8.11.0.1 Interim fix 17, 8.11.0.1 Interim fix 18, 8.11.1 Interim fix 7 21.04.2023 SB2023042131
SB2023042132
SB2023050511
and 88 more
#VU74862 - Resource Management Errors
CVE-2023-29469		 CWE-399 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU72575 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48339		 CWE-78 High
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 50 more
#VU72573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48337		 CWE-78 High
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 42 more
#VU72123 - Deserialization of Untrusted Data
CVE-2023-25194		 CWE-502 Low
Available
No
 8.10.5.1 Interim fix 36, 8.11.0.1 Interim fix 17, 8.11.0.1 Interim fix 18, 8.11.1 Interim fix 7 11.02.2023 SB2023021101
SB2023030952
SB2023040419
and 40 more
#VU70797 - Exposure of sensitive information to an unauthorized actor
CVE-2022-45787		 CWE-200 Low
No
No
 8.10.5.1 Interim fix 53, 8.11.0.1 Interim fix 28, 8.11.1 Interim fix 20, 8.12.0.1 Interim fix 2 09.01.2023 SB2023010909
SB2023020878
SB2023031107
and 34 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 8.10.5.1 Interim fix 36, 8.11.0.1 Interim fix 17, 8.11.0.1 Interim fix 18, 8.11.1 Interim fix 7 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU55416 - Improper input validation
CVE-2012-0881		 CWE-20 Medium
No
No
 8.10.5.1 Interim fix 36, 8.11.0.1 Interim fix 17, 8.11.0.1 Interim fix 18, 8.11.1 Interim fix 7 28.07.2021 SB2021072822
SB2023070731
SB2023102710
and 19 more
#VU11953 - Permissions, Privileges, and Access Controls
CVE-2018-2799		 CWE-264 Low
No
No
 8.10.5.1 Interim fix 36, 8.11.0.1 Interim fix 17, 8.11.0.1 Interim fix 18, 8.11.1 Interim fix 7 19.04.2018 SB2018041911
SB2018041919
SB2018041920
and 27 more


Showing elements 101 - 120 out of 188