Known vulnerabilities in Operations Dashboard - page 2

Software CPE: cpe:2.3:a:ibm_corporation:operations_dashboard:*:*:*:*:*:*:*:*
Total vulnerabilities: 75
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Operations Dashboard Operations Dashboard is affected by 75 known vulnerabilities: 1 critical, 4 high, 66 medium, 4 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77531 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29405
CWE-94 Medium
No
No
2022.2.1-13-lts 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 45 more
#VU77530 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29404
CWE-94 Medium
No
No
2022.2.1-13-lts 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 44 more
#VU77528 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29402
CWE-94 Medium
No
No
2022.2.1-13-lts 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 45 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540
CWE-94 Medium
No
No
2022.2.1-12-lts 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539
CWE-79 Medium
No
No
2022.2.1-12-lts 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU75546 - Improper input validation
CVE-2023-24535
CWE-20 Medium
No
No
2022.2.1-10-lts 27.04.2023 SB2023042718
SB2023051931
SB2023070614
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538
CWE-94 High
No
No
2022.2.1-12-lts 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-24537
CWE-835 Medium
No
No
2022.2.1-12-lts 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 87 more
#VU74572 - Resource Management Errors
CVE-2023-24536
CWE-399 Medium
No
No
2022.2.1-12-lts 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 80 more
#VU73722 - Resource exhaustion
CVE-2022-41725
CWE-400 Medium
No
No
2022.2.1-9-lts 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU73264 - Incorrect Calculation
CVE-2023-24532
CWE-682 High
No
No
2022.2.1-10-lts 13.03.2023 SB2023031318
SB2023031319
SB2023031537
and 43 more
#VU72886 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-41721
CWE-444 Medium
No
No
2022.2.1-7-lts 06.03.2023 SB2023030655
SB2023030656
SB2023030657
and 39 more
#VU72686 - Resource exhaustion
CVE-2022-41723
CWE-400 Medium
No
No
2022.2.1-9-lts 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72685 - Resource Management Errors
CVE-2022-41724
CWE-399 Medium
No
No
2022.2.1-9-lts 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717
CWE-770 Medium
Available
No
2022.2.1-7-lts 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU70119 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-41915
CWE-113 Medium
No
No
2022.2.1-8-lts 12.12.2022 SB2022121215
SB2023011210
SB2023013027
and 25 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881
CWE-835 Medium
No
No
2022.2.1-8-lts 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU68832 - Resource exhaustion
CVE-2022-42004
CWE-400 Medium
No
No
2022.2.1-7-lts 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
2022.2.1-7-lts 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Available
Exploited
2020.4.1-6-eus, 2021.4.1-2 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more


Showing elements 21 - 40 out of 75