Known vulnerabilities in Rapid Infrastructure Automation

Vendor: IBM Corporation
Software: Rapid Infrastructure Automation
Software CPE: cpe:2.3:a:ibm_corporation:rapid_infrastructure_automation:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 42
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Rapid Infrastructure Automation Rapid Infrastructure Automation is affected by 42 known vulnerabilities: 2 critical, 20 high, 15 medium, 5 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107611 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-6827		 CWE-444 High
No
No
 1.1.5.3 18.04.2025 SB2025041831
SB2025041832
SB2025041834
and 15 more
#VU106282 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-12905		 CWE-59 High
No
No
 1.1.5.3 31.03.2025 SB2025033140
SB2025033150
SB2025033151
and 15 more
#VU106101 - Memory corruption
CVE-2025-27835		 CWE-119 High
No
No
 1.1.5.3 27.03.2025 SB2025032721
SB2025032723
SB2025032729
and 13 more
#VU106100 - Memory corruption
CVE-2025-27834		 CWE-119 High
No
No
 1.1.5.3 27.03.2025 SB2025032721
SB2025032723
SB2025032729
and 9 more
#VU106099 - Memory corruption
CVE-2025-27833		 CWE-119 High
No
No
 1.1.5.3 27.03.2025 SB2025032721
SB2025032723
SB2025032729
and 7 more
#VU106096 - Memory corruption
CVE-2025-27830		 CWE-119 High
No
No
 1.1.5.3 27.03.2025 SB2025032721
SB2025032723
SB2025032729
and 9 more
#VU105946 - Use After Free
CVE-2025-24855		 CWE-416 High
No
No
 1.1.5.3 21.03.2025 SB2025031964
SB2025032154
SB2025032155
and 63 more
#VU105879 - Use After Free
CVE-2024-55549		 CWE-416 High
No
No
 1.1.5.3 19.03.2025 SB2025031964
SB2025031965
SB2025032155
and 69 more
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 1.1.5.3 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU105485 - Improper input validation
CVE-2025-24813		 CWE-20 Critical
Available
Exploited
 1.1.5.3 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU104213 - NULL Pointer Dereference
CVE-2025-27113		 CWE-476 Medium
No
No
 1.1.5.3 26.02.2025 SB2025022619
SB2025022621
SB2025022890
and 32 more
#VU103688 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31879		 CWE-200 Low
No
No
 1.1.5.3 06.02.2025 SB2021042961
SB2025020665
SB2025020666
and 7 more
#VU101386 - Resource exhaustion
CVE-2024-12254		 CWE-400 Medium
No
No
 1.1.5.3 10.12.2024 SB2024121033
SB2024121034
SB2024121035
and 13 more
#VU99618 - Improper input validation
CVE-2024-46951		 CWE-20 High
No
No
 1.1.5.3 01.11.2024 SB2024110189
SB2024110791
SB2024110792
and 16 more
#VU99619 - Improper input validation
CVE-2024-46952		 CWE-20 High
No
No
 1.1.5.3 01.11.2024 SB2024110189
SB2024110898
SB2024110899
and 12 more
#VU99616 - Integer overflow
CVE-2024-46953		 CWE-190 High
No
No
 1.1.5.3 01.11.2024 SB2024110189
SB2024110192
SB2024110791
and 12 more
#VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9287		 CWE-78 Low
No
No
 1.1.5.3 28.10.2024 SB2024102836
SB2024102838
SB20241101111
and 117 more
#VU96596 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-8088		 CWE-835 Medium
No
No
 1.1.5.3 28.08.2024 SB2024082860
SB2024082861
SB2024082862
and 82 more
#VU95157 - Incorrect Provision of Specified Functionality
CVE-2024-4032		 CWE-684 Medium
No
No
 1.1.5.3 02.08.2024 SB2024080203
SB2024080207
SB2024080209
and 101 more
#VU94617 - Stack-based buffer overflow
CVE-2024-40897		 CWE-121 Medium
No
No
 1.1.5.3 19.07.2024 SB2024071935
SB2024073040
SB2024073058
and 14 more


Showing elements 1 - 20 out of 42