Known vulnerabilities in Operational Decision Manager - page 8

Vendor: IBM Corporation
Software: Operational Decision Manager
Software CPE: cpe:2.3:a:ibm_corporation:operational_decision_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 188
Public exploits: 20
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Operational Decision Manager Operational Decision Manager is affected by 188 known vulnerabilities: 1 critical, 23 high, 114 medium, 50 low Critical High Medium Low

Vulnerabilities (188)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83312 - Authorization Bypass Through User-Controlled Key
CVE-2023-44981		 CWE-639 Medium
No
No
 8.10.5.1 Interim fix 47, 8.11.0.1 Interim fix 25, 8.11.1 Interim fix 15, 8.12.0 Interim fix 6 20.11.2023 SB2023112072
SB2023112073
SB2023112077
and 45 more
#VU81803 - Exposed Dangerous Method or Function
CVE-2023-42794		 CWE-749 Medium
No
No
 8.10.5.1 Interim fix 47, 8.11.0.1 Interim fix 25, 8.11.1 Interim fix 15, 8.12.0 Interim fix 6 10.10.2023 SB2023101084
SB2023101286
SB2023111528
and 22 more
#VU81800 - Resource Management Errors
CVE-2023-42795		 CWE-399 Medium
No
No
 8.10.5.1 Interim fix 47, 8.11.0.1 Interim fix 25, 8.11.1 Interim fix 15, 8.12.0 Interim fix 6 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648		 CWE-444 Medium
No
No
 8.10.5.1 Interim fix 47, 8.11.0.1 Interim fix 25, 8.11.1 Interim fix 15, 8.12.0 Interim fix 6 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 8.10.5.1 Interim fix 47, 8.11.0.1 Interim fix 25, 8.11.1 Interim fix 15, 8.12.0 Interim fix 6 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU80880 - Security Features
CVE-2023-34034		 CWE-254 High
No
No
 8.10.5.1 Interim fix 41, 8.11.0.1 Interim fix 21, 8.11.1 Interim fix 10, 8.12.0 Interim fix 2 19.09.2023 SB2023091914
SB2023100926
SB20231017104
and 22 more
#VU80879 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-37460		 CWE-22 High
No
No
 8.10.5.1 Interim fix 41, 8.11.0.1 Interim fix 21, 8.11.1 Interim fix 10, 8.12.0 Interim fix 2 19.09.2023 SB2023091914
SB2023110849
SB2023112320
and 10 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 8.10.5.1 Interim fix 44, 8.11.0.1 Interim fix 24, 8.11.1 Interim fix 13, 8.12.0 Interim fix 5 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Available
No
 8.10.5.1 Interim fix 44, 8.11.0.1 Interim fix 24, 8.11.1 Interim fix 13, 8.12.0 Interim fix 5 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609		 CWE-502 High
No
No
 8.10.5.1 Interim fix 47, 8.11.0.1 Interim fix 25, 8.11.1 Interim fix 15, 8.12.0 Interim fix 6 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU78410 - Improper input validation
CVE-2023-22041		 CWE-20 Low
No
No
 8.10.5.1 Interim fix 43, 8.11.0.1 Interim fix 23, 8.11.1 Interim fix 12, 8.12.0 Interim fix 4 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 60 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 8.10.5.1 Interim fix 43, 8.11.0.1 Interim fix 23, 8.11.1 Interim fix 12, 8.12.0 Interim fix 4 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 8.10.5.1 Interim fix 43, 8.11.0.1 Interim fix 23, 8.11.1 Interim fix 12, 8.12.0 Interim fix 4 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU78415 - Improper input validation
CVE-2023-22036		 CWE-20 Low
No
No
 8.10.5.1 Interim fix 43, 8.11.0.1 Interim fix 23, 8.11.1 Interim fix 12, 8.12.0 Interim fix 4 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 65 more
#VU78416 - Improper input validation
CVE-2023-22006		 CWE-20 Low
No
No
 8.10.5.1 Interim fix 43, 8.11.0.1 Interim fix 23, 8.11.1 Interim fix 12, 8.12.0 Interim fix 4 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 67 more
#VU77073 - Improper Access Control
CVE-2014-0107		 CWE-284 Medium
No
No
 8.10.5.1 Interim fix 41, 8.11.0.1 Interim fix 21, 8.11.1 Interim fix 10, 8.12.0 Interim fix 2 07.06.2023 SB2014041609
SB2023090520
SB2023091914
and 6 more
#VU75993 - Resource Management Errors
CVE-2023-2253		 CWE-399 Medium
No
No
 8.10.5.1 Interim fix 43, 8.11.0.1 Interim fix 23, 8.11.1 Interim fix 12, 8.12.0 Interim fix 4 10.05.2023 SB2023051039
SB2023051040
SB2023051041
and 22 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881		 CWE-407 Medium
No
No
 8.10.5.1 Interim fix 41, 8.11.0.1 Interim fix 21, 8.11.1 Interim fix 10, 8.12.0 Interim fix 2 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU69545 - Incorrect Default Permissions
CVE-2022-41946		 CWE-276 Low
No
No
 8.10.5.1 Interim fix 39, 8.11.0.1 Interim fix 21, 8.11.1 Interim fix 9, 8.12.0 Interim fix 1 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU65831 - Improper input validation
CVE-2022-2047		 CWE-20 Low
No
No
 8.10.5.1 Interim fix 41, 8.11.0.1 Interim fix 21, 8.11.1 Interim fix 10, 8.12.0 Interim fix 2 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more


Showing elements 141 - 160 out of 188