Known vulnerabilities in Optim

Vendor: IBM Corporation
Software: Optim
Software CPE: cpe:2.3:a:ibm_corporation:optim:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 48
Public exploits: 5
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Optim Optim is affected by 48 known vulnerabilities: 11 high, 31 medium, 6 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148924 - Improper Access Control
CVE-2026-3009		 CWE-284 Low
No
No
 2.0.0 10.09.2026 SB2026060134
SB2026091065
SB2026091066
and 1 more
#VU148925 - Improper Access Control
CVE-2026-2603		 CWE-284 Medium
No
No
 2.0.0 10.09.2026 SB2026060134
SB2026091064
SB2026091065
and 2 more
#VU143738 - Improper input validation
CVE-2026-4424		 CWE-20 Medium
No
No
 2.0.0 17.08.2026 SB2026081772
SB2026081773
SB2026081774
and 6 more
#VU133121 - Improper Validation of Specified Type of Input
CVE-2026-2092		 CWE-1287 Low
No
No
 2.0.0 01.06.2026 SB2026060134
SB2026091064
SB2026091065
and 2 more
#VU132376 - Out-of-bounds write
CVE-2026-41907		 CWE-787 High
No
No
 2.0.0 27.05.2026 SB2026052766
SB2026052768
SB2026060118
and 12 more
#VU132316 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-67030		 CWE-22 High
No
No
 2.0.0 26.05.2026 SB2026052670
SB2026052672
SB2026052673
and 19 more
#VU127046 - Improper input validation
CVE-2026-27135		 CWE-20 Medium
No
No
 2.0.0 23.04.2026 SB2026042395
SB20260423101
SB20260423102
and 53 more
#VU126575 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-41889		 CWE-89 Medium
No
No
 2.0.0 20.04.2026 SB20260420104
SB2026092324
#VU124423 - Allocation of Resources Without Limits or Throttling
CVE-2026-33871		 CWE-770 Medium
No
No
 2.0.0 25.03.2026 SB2026032533
SB20260415180
SB20260422237
and 19 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870		 CWE-444 Medium
Available
No
 2.0.0 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 25 more
#VU124068 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-4111		 CWE-835 Medium
No
No
 2.0.0 17.03.2026 SB2026031740
SB2026031920
SB2026031927
and 16 more
#VU124034 - Resource exhaustion
CVE-2025-61726		 CWE-400 Medium
No
No
 2.0.0 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 145 more
#VU123913 - Improper Access Control
CVE-2024-29371		 CWE-284 Medium
No
No
 2.0.0 12.03.2026 SB2026031212
SB2026031213
SB2026031310
and 30 more
#VU122489 - Heap-based Buffer Overflow
CVE-2026-25646		 CWE-122 High
No
No
 2.0.0 10.02.2026 SB2026021002
SB2026021255
SB2026021256
and 69 more
#VU122076 - Stack-based buffer overflow
CVE-2025-15467		 CWE-121 High
Available
No
 2.0.0 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 67 more
#VU120611 - Out-of-bounds write
CVE-2025-68973		 CWE-787 High
No
No
 1.2.0 29.12.2025 SB2025122901
SB2025122902
SB2026010860
and 28 more
#VU119115 - Out-of-bounds read
CVE-2025-66293		 CWE-125 Medium
No
No
 2.0.0 03.12.2025 SB2025120348
SB20251210187
SB2025121761
and 46 more
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 1.2.0 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 56 more
#VU116913 - Reachable Assertion
CVE-2025-59530		 CWE-617 Medium
No
No
 1.2.0 13.10.2025 SB2025101341
SB2025111857
SB2025111935
and 4 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988		 CWE-611 Medium
Available
Exploited
 1.2.0 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 33 more


Showing elements 1 - 20 out of 48