Known vulnerabilities in Rational Asset Analyzer

Vendor: IBM Corporation
Software: Rational Asset Analyzer
Software CPE: cpe:2.3:a:ibm_corporation:rational_asset_analyzer:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Rational Asset Analyzer Rational Asset Analyzer is affected by 7 known vulnerabilities: 4 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165		 CWE-444 Medium
No
No
 - 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU67948 - Resource exhaustion
CVE-2022-37734		 CWE-400 Medium
No
No
 - 05.10.2022 SB2022100553
SB2022100555
SB2022100650
and 19 more
#VU65906 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22393		 CWE-200 Low
No
No
 - 01.08.2022 SB2022080110
SB2022081039
SB2022081515
and 8 more
#VU64197 - Improper Authentication
CVE-2022-22475		 CWE-287 Low
No
No
 - 13.06.2022 SB2022061307
SB2022061310
SB2022062218
and 26 more
#VU64013 - Improper Restriction of Rendered UI Layers or Frames
CVE-2021-46708		 CWE-1021 Medium
No
No
 - 07.06.2022 SB2022060710
SB2022061603
SB2022061612
and 9 more
#VU64011 - Improper input validation
CVE-2018-25031		 CWE-20 Low
Available
No
 - 07.06.2022 SB2022060710
SB2022061603
SB2022061612
and 23 more
#VU53616 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-20492		 CWE-611 Medium
No
No
 - 27.05.2021 SB2021052715
SB2022012444
SB2022042567
and 4 more