Known vulnerabilities in Operations Analytics - Log Analysis

Vendor: IBM Corporation
Software: Operations Analytics - Log Analysis
Software CPE: cpe:2.3:a:ibm_corporation:operations_analytics_-_log_analysis:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 46
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Operations Analytics - Log Analysis Operations Analytics - Log Analysis is affected by 46 known vulnerabilities: 6 high, 31 medium, 9 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124875 - Use of Hard-coded Cryptographic Key
CVE-2025-14923		 CWE-321 Low
No
No
 - 06.04.2026 SB2026040626
SB2026040627
SB2026041006
and 14 more
#VU123576 - Improper input validation
CVE-2025-11143		 CWE-20 Low
No
No
 1.3.8.4 05.03.2026 SB2026030558
SB2026040716
SB2026042070
and 10 more
#VU116606 - Information Exposure Through an Error Message
CVE-2025-49128		 CWE-209 Low
No
No
 1.3.8.4 06.10.2025 SB2025100621
SB2025100622
SB20251022103
and 7 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 1.3.8.4 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 45 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988		 CWE-611 Medium
Available
No
 1.3.8.4 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 31 more
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 1.3.8.4 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 41 more
#VU112257 - Improper input validation
CVE-2025-31672		 CWE-20 Medium
No
No
 1.3.8.4 04.07.2025 SB20250704104
SB2025070708
SB2025071664
and 23 more
#VU112106 - Memory corruption
CVE-2025-52999		 CWE-119 Medium
No
No
 1.3.8.4 02.07.2025 SB2025070257
SB2025070261
SB2025070262
and 43 more
#VU108837 - Improper Resource Shutdown or Release
CVE-2024-13009		 CWE-404 Medium
No
No
 1.3.8.4 09.05.2025 SB2025050925
SB2025052987
SB2025060616
and 22 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 1.3.8.4 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103290 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-12801		 CWE-611 Medium
No
No
 1.3.8.4 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 23 more
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798		 CWE-94 Low
No
No
 1.3.8.4 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 1.3.8.4 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU98517 - Resource exhaustion
CVE-2024-8184		 CWE-400 Medium
No
No
 1.3.8.4 14.10.2024 SB20241014108
SB2024101836
SB2024112849
and 38 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763		 CWE-918 Medium
No
No
 1.3.8.4 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU62403 - Improper input validation
CVE-2021-22570		 CWE-20 Medium
No
No
 1.3.8.0 19.04.2022 SB2022041949
SB2022062233
SB2022100638
and 34 more
#VU61043 - Resource Management Errors
CVE-2022-26336		 CWE-399 Medium
No
No
 1.3.8.4 07.03.2022 SB2022030703
SB2023012211
SB2023020762
and 6 more
#VU48887 - Permissions, Privileges, and Access Controls
CVE-2020-16971		 CWE-264 High
No
No
 1.3.8 Fix Pack 3 08.12.2020 SB2020120848
SB2025112544
SB2026021611
and 1 more
#VU25355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20444		 CWE-444 Medium
No
No
 1.3.8.4 14.02.2020 SB2020012928
SB2020022601
SB2020031305
and 36 more
#VU38060 - Improper input validation
CVE-2015-2156		 CWE-20 Medium
No
No
 1.3.8.4 18.10.2017 SB2017101815
SB2022072128
SB2024052918
and 6 more


Showing elements 1 - 20 out of 46