Known vulnerabilities in Operations Dashboard

Vendor: IBM Corporation
Software: Operations Dashboard
Software CPE: cpe:2.3:a:ibm_corporation:operations_dashboard:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 75
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Operations Dashboard Operations Dashboard is affected by 75 known vulnerabilities: 1 critical, 4 high, 66 medium, 4 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24788		 CWE-835 Medium
No
No
 2022.2.1-24 09.05.2024 SB2024050936
SB2024050937
SB2024051029
and 43 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 2022.2.1-23 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 - 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87201 - Improper input validation
CVE-2024-24784		 CWE-20 Medium
No
No
 2022.2.1-24 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785		 CWE-79 Low
No
No
 2022.2.1-24 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289		 CWE-200 Low
No
No
 2022.2.1-24 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87197 - Resource exhaustion
CVE-2023-45290		 CWE-400 Medium
No
No
 2022.2.1-24 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 2022.2.1-24 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86309 - Observable discrepancy
CVE-2023-45287		 CWE-203 Medium
No
No
 - 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 - 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU81964 - Improper input validation
CVE-2023-39323		 CWE-20 Medium
No
No
 2022.2.1-16 12.10.2023 SB2023101258
SB2023101259
SB2023101260
and 38 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319		 CWE-79 Medium
No
No
 2022.2.1-16 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39318		 CWE-79 Medium
No
No
 2022.2.1-16 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 61 more
#VU80571 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39320		 CWE-94 Medium
No
No
 2022.2.1-16-lts 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 15 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409		 CWE-295 Medium
No
No
 2022.2.1-15-lts 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 2022.2.1-14-lts 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 2022.2.1-15-lts 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU77529 - Permissions, Privileges, and Access Controls
CVE-2023-29403		 CWE-264 Medium
No
No
 2022.2.1-13-lts 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 46 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400		 CWE-79 Medium
No
No
 2022.2.1-13-lts 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU74571 - Resource exhaustion
CVE-2023-24534		 CWE-400 Medium
No
No
 2022.2.1-11-lts 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more


Showing elements 1 - 20 out of 75