Known vulnerabilities in Rational Change

Known vulnerabilities in Rational Change

Vendor: IBM Corporation

Software: Rational Change

Software CPE: cpe:2.3:a:ibm_corporation:rational_change:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 18

Public exploits: 4

Known exploited (KEV): 1

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (18)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU86808 - Resource exhaustion CVE-2024-22201	CWE-400	Medium	No	No	5.3.2.7	26.02.2024	SB2024022652 SB2024030711 SB2024030845 and 43 more
#VU81728 - Resource exhaustion CVE-2023-44487	CWE-400	High	Available	Exploited	5.3.2.7	10.10.2023	SB2023101023 SB2023101024 SB2023101037 and 648 more
#VU81726 - Integer overflow CVE-2023-36478	CWE-190	Medium	No	No	5.3.2.7	10.10.2023	SB2023101018 SB2023102640 SB2023103106 and 53 more
#VU80793 - Improper Authorization CVE-2023-41900	CWE-285	Low	No	No	5.3.2.7	14.09.2023	SB2023091440 SB2023092933 SB2023102621 and 29 more
#VU80792 - Improper input validation CVE-2023-36479	CWE-20	Medium	No	No	5.3.2.7	14.09.2023	SB2023091440 SB2023092933 SB2023102621 and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-40167	CWE-444	Medium	No	No	5.3.2.7	14.09.2023	SB2023091440 SB2023092933 SB2023101760 and 68 more
#VU75218 - Resource exhaustion CVE-2023-26048	CWE-400	Medium	No	No	5.3.2.6	18.04.2023	SB2023041842 SB2023051753 SB2023060701 and 55 more
#VU75217 - Improper input validation CVE-2023-26049	CWE-20	Low	No	No	5.3.2.6	18.04.2023	SB2023041842 SB2023051821 SB2023060836 and 78 more
#VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998	CWE-770	Medium	Available	No	5.3.2.6	20.02.2023	SB2023022046 SB2023022047 SB2023030917 and 202 more
#VU65832 - Missing release of memory after effective lifetime CVE-2022-2191	CWE-401	Medium	No	No	5.3.2.5	27.07.2022	SB2022072723 SB2022100615 SB2022101891 and 8 more
#VU65831 - Improper input validation CVE-2022-2047	CWE-20	Low	No	No	5.3.2.5	27.07.2022	SB2022072723 SB2022080103 SB2022080260 and 41 more
#VU65830 - Resource Management Errors CVE-2022-2048	CWE-399	Medium	No	No	5.3.2.5	27.07.2022	SB2022072723 SB2022080103 SB2022080260 and 44 more
#VU56964 - Improper Access Control CVE-2021-34429	CWE-284	Medium	Available	No	5.3.2.5	30.09.2021	SB2021093014 SB2021093016 SB2022012745 and 25 more
#VU55642 - Insufficient Session Expiration CVE-2021-34428	CWE-613	Low	No	No	5.3.2.5	08.08.2021	SB2021080801 SB2021080803 SB2021081922 and 25 more
#VU53973 - Improper input validation CVE-2021-28169	CWE-20	Medium	No	No	5.3.2.5	09.06.2021	SB2021060910 SB2021061815 SB2021081922 and 36 more
#VU51878 - Exposure of sensitive information to an unauthorized actor CVE-2021-28163	CWE-200	Medium	No	No	5.3.2.5	01.04.2021	SB2021040179 SB2021050704 SB2021051321 and 27 more
#VU51877 - Improper input validation CVE-2021-28164	CWE-20	Medium	Available	No	5.3.2.5	01.04.2021	SB2021040179 SB2021050704 SB2021051321 and 22 more
#VU51876 - Resource exhaustion CVE-2021-28165	CWE-400	Medium	No	No	5.3.2.5	01.04.2021	SB2021040179 SB2021042208 SB2021050704 and 56 more