Known vulnerabilities in Operations Dashboard - page 4

Vendor: IBM Corporation
Software: Operations Dashboard
Software CPE: cpe:2.3:a:ibm_corporation:operations_dashboard:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 75
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Operations Dashboard Operations Dashboard is affected by 75 known vulnerabilities: 1 critical, 4 high, 66 medium, 4 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629		 CWE-330 Medium
No
No
 2020.4.1-12, 2022.2-1 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU65693 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-33194		 CWE-835 Medium
No
No
 2020.4.1-3, 2021.3.1 22.07.2022 SB2021052653
SB2022072210
SB2022081842
and 16 more
#VU64805 - Improper input validation
CVE-2021-43565		 CWE-20 Medium
No
No
 - 29.06.2022 SB2021120347
SB2022062928
SB2022072127
and 39 more
#VU64269 - Integer overflow
CVE-2022-28327		 CWE-190 Low
No
No
 2020.4.1-10, 2021.4.1-6 14.06.2022 SB2022041004
SB2022061422
SB2022061506
and 90 more
#VU64266 - Buffer overflow
CVE-2022-24675		 CWE-120 Low
No
No
 2020.4.1-10, 2021.4.1-6 14.06.2022 SB2022041004
SB2022061422
SB2022061511
and 88 more
#VU62036 - Unchecked Return Value
CVE-2022-23806		 CWE-252 Medium
No
No
 2020.4.1-8, 2021.4.1-4 10.04.2022 SB2022041002
SB2022041003
SB2022060126
and 46 more
#VU61227 - Incorrect Regular Expression
CVE-2022-24921		 CWE-185 Medium
No
No
 2020.4.1-8, 2021.4.1-4 10.03.2022 SB2022031004
SB2022031005
SB2022041208
and 41 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 - 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Available
Exploited
 - 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU56829 - Improper input validation
CVE-2021-29923		 CWE-20 Medium
No
No
 2020.4.1-3, 2021.3.1 22.09.2021 SB2021092225
SB2021092226
SB2021100408
and 37 more
#VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33195		 CWE-79 Medium
No
No
 2020.4.1-3, 2021.3.1 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 38 more
#VU55668 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-36221		 CWE-362 Medium
No
No
 2020.4.1-3, 2021.3.1 10.08.2021 SB2021081001
SB2021081217
SB2021081219
and 32 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558		 CWE-295 Medium
Available
No
 2020.4.1-3, 2021.3.1 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU54521 - Resource exhaustion
CVE-2021-33196		 CWE-400 Medium
No
No
 2020.4.1-3, 2021.3.1 04.07.2021 SB2021070405
SB2021070406
SB2021071515
and 37 more


Showing elements 61 - 80 out of 75