Known vulnerabilities in Optim - page 2

Vendor: IBM Corporation
Software: Optim
Software CPE: cpe:2.3:a:ibm_corporation:optim:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 48
Public exploits: 5
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Optim Optim is affected by 48 known vulnerabilities: 11 high, 31 medium, 6 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143925 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-33672		 CWE-1321 Medium
No
No
 2.0.0 18.08.2026 SB2026081815
SB2026081816
SB2026081831
and 5 more
#VU139384 - Inefficient Regular Expression Complexity
CVE-2026-33671		 CWE-1333 Medium
No
No
 2.0.0 26.07.2026 SB2026072609
SB2026072616
SB2026081816
and 6 more
#VU138926 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-12143		 CWE-93 High
No
No
 2.0.0 21.07.2026 SB20260721116
SB2026072414
SB2026072616
and 22 more
#VU134925 - Improper input validation
CVE-2026-40181		 CWE-20 Low
No
No
 2.0.0 19.06.2026 SB2026061978
SB2026070733
SB2026071327
and 3 more
#VU134924 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33245		 CWE-79 Medium
No
No
 2.0.0 19.06.2026 SB2026061977
SB2026083158
SB2026100265
and 1 more
#VU134923 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33244		 CWE-79 Low
No
No
 2.0.0 19.06.2026 SB2026061977
SB2026070733
SB2026110620
#VU134922 - Resource exhaustion
CVE-2026-34077		 CWE-400 Medium
No
No
 2.0.0 19.06.2026 SB2026061976
SB2026061989
SB20260619100
and 4 more
#VU128031 - Improper Access Control
CVE-2026-27588		 CWE-284 High
No
No
 1.2.0 27.04.2026 SB2026042757
SB2026092319
#VU128030 - Improper Access Control
CVE-2026-27587		 CWE-284 High
No
No
 1.2.0 27.04.2026 SB2026042757
SB2026092319
#VU127892 - Improper Verification of Cryptographic Signature
CVE-2026-25793		 CWE-347 Medium
No
No
 1.2.0 25.04.2026 SB20260425201
SB2026092236
#VU125981 - Exposure of sensitive information to an unauthorized actor
CVE-2026-40895		 CWE-200 Medium
No
No
 2.0.0 14.04.2026 SB20260414106
SB2026062434
SB20260625284
and 20 more
#VU124616 - Resource exhaustion
CVE-2026-1519		 CWE-400 Medium
No
No
 2.0.0 25.03.2026 SB20260325207
SB20260325210
SB20260325211
and 44 more
#VU124615 - Missing release of memory after effective lifetime
CVE-2026-3104		 CWE-401 Medium
No
No
 2.0.0 25.03.2026 SB20260325207
SB20260325210
SB20260325211
and 5 more
#VU122452 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-25639		 CWE-754 Medium
Available
No
 1.2.0, 2.0.0 09.02.2026 SB2026020914
SB2026022201
SB2026022202
and 28 more
#VU122008 - Out-of-bounds write
CVE-2025-27821		 CWE-787 Low
No
No
 2.0.0 24.01.2026 SB2026012411
SB2026042214
SB2026042288
and 2 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465		 CWE-1321 Medium
No
No
 1.2.0, 2.0.0 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 73 more
#VU119235 - Resource exhaustion
CVE-2025-61729		 CWE-400 Medium
No
No
 1.2.0 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 148 more
#VU111223 - Type confusion
CVE-2025-49796		 CWE-843 Medium
No
No
 2.0.0 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 86 more
#VU111222 - NULL Pointer Dereference
CVE-2025-49795		 CWE-476 Medium
No
No
 2.0.0 17.06.2025 SB2025070832
SB20250711170
SB20250711171
and 8 more
#VU111221 - Use After Free
CVE-2025-49794		 CWE-416 Medium
No
No
 2.0.0 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 67 more


Showing elements 21 - 40 out of 48