Known vulnerabilities in Operational Decision Manager - page 7

Vendor: IBM Corporation
Software: Operational Decision Manager
Software CPE: cpe:2.3:a:ibm_corporation:operational_decision_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 188
Public exploits: 20
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Operational Decision Manager Operational Decision Manager is affected by 188 known vulnerabilities: 1 critical, 23 high, 114 medium, 50 low Critical High Medium Low

Vulnerabilities (188)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83414 - Resource exhaustion
CVE-2023-46120		 CWE-400 Medium
No
No
 8.10.5.1 Interim fix 47, 8.11.0.1 Interim fix 25, 8.11.1 Interim fix 15, 8.12.0 Interim fix 6 22.11.2023 SB2023112217
SB2023113030
SB2023121209
and 7 more
#VU80886 - Incorrect Permission Assignment for Critical Resource
CVE-2023-34042		 CWE-732 Low
No
No
 8.10.5.1 Interim fix 47, 8.11.0.1 Interim fix 25, 8.11.1 Interim fix 15, 8.12.0 Interim fix 6 19.09.2023 SB2023091922
SB2023112217
SB2023120414
and 6 more
#VU80793 - Improper Authorization
CVE-2023-41900		 CWE-285 Low
No
No
 8.10.5.1 Interim fix 47, 8.11.0.1 Interim fix 25, 8.11.1 Interim fix 15, 8.12.0 Interim fix 6 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 29 more
#VU79296 - Insufficient Verification of Data Authenticity
CVE-2023-37920		 CWE-345 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 09.08.2023 SB2023080939
SB20230821166
SB2023090820
and 89 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU77612 - Resource exhaustion
CVE-2023-2828		 CWE-400 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 21.06.2023 SB2023062155
SB2023062201
SB2023062601
and 66 more
#VU77531 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29405		 CWE-94 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 45 more
#VU77530 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29404		 CWE-94 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 44 more
#VU77529 - Permissions, Privileges, and Access Controls
CVE-2023-29403		 CWE-264 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 46 more
#VU77528 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29402		 CWE-94 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 45 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Available
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602		 CWE-401 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321		 CWE-295 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU76041 - Permissions, Privileges, and Access Controls
CVE-2023-2454		 CWE-264 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 55 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484		 CWE-476 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU73829 - State Issues
CVE-2023-27536		 CWE-371 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603		 CWE-98 High
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU54077 - Resource exhaustion
CVE-2021-33503		 CWE-400 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 13.06.2021 SB2021061304
SB2021061305
SB2021071501
and 36 more
#VU18336 - Improper Authentication
CVE-2019-11235		 CWE-287 Medium
No
No
 8.10.5.1 Interim fix 49, 8.11.0.1 Interim fix 26, 8.12.0 Interim fix 8 25.04.2019 SB2019042501
SB2019042502
SB2019050904
and 7 more


Showing elements 121 - 140 out of 188