Known vulnerabilities in Rational Performance Tester - page 2

Vendor: IBM Corporation
Software: Rational Performance Tester
Software CPE: cpe:2.3:a:ibm_corporation:rational_performance_tester:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 97
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Rational Performance Tester Rational Performance Tester is affected by 97 known vulnerabilities: 6 high, 73 medium, 18 low Critical High Medium Low

Vulnerabilities (97)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126510 - XML Injection
CVE-2026-34601		 CWE-91 Medium
No
No
 - 20.04.2026 SB2026042034
SB2026042047
SB2026042720
and 3 more
#VU125804 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-2950		 CWE-1321 Medium
No
No
 - 10.04.2026 SB2026041094
SB2026042049
SB2026042720
and 15 more
#VU125803 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-4800		 CWE-94 High
No
No
 - 10.04.2026 SB2026041094
SB20260410101
SB20260410102
and 63 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870		 CWE-444 Medium
Available
No
 - 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 20 more
#VU121145 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-12543		 CWE-644 Medium
No
No
 - 10.01.2026 SB2026011002
SB2026021723
SB2026021724
and 9 more
#VU119966 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-67735		 CWE-93 Medium
No
No
 - 15.12.2025 SB2025121552
SB2025121974
SB2026012079
and 23 more
#VU119401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-64756		 CWE-78 Medium
No
No
 - 09.12.2025 SB2025120922
SB2025120932
SB20251210178
and 18 more
#VU119260 - Resource exhaustion
CVE-2024-3884		 CWE-400 Medium
No
No
 - 08.12.2025 SB2025120817
SB2025120926
SB2025120927
and 13 more
#VU118734 - Resource exhaustion
CVE-2025-9784		 CWE-400 Medium
No
No
 - 24.11.2025 SB2024121157
SB2025121162
SB2026021723
and 3 more
#VU117439 - Improper input validation
CVE-2025-48795		 CWE-20 Low
No
No
 - 22.10.2025 SB2025102238
SB2025102279
SB2025102286
and 9 more
#VU116684 - Improper input validation
CVE-2025-11226		 CWE-20 Medium
No
No
 - 07.10.2025 SB2025100745
SB2025100746
SB2025112108
and 19 more
#VU116142 - Uncontrolled Recursion
CVE-2025-53864		 CWE-674 Medium
No
No
 - 26.09.2025 SB2025092630
SB2025092631
SB2025100301
and 27 more
#VU114346 - Command injection
CVE-2025-7962		 CWE-77 Medium
No
No
 - 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 55 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 181 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 - 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more
#VU105112 - Resource exhaustion
CVE-2025-23184		 CWE-400 Medium
No
No
 - 28.02.2025 SB2025022807
SB2025030340
SB2025041017
and 40 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 - 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 - 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 60 more
#VU41989 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8203		 CWE-94 Medium
No
No
 - 10.08.2020 SB2020071548
SB2020122111
SB2021042308
and 31 more
#VU21764 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-10744		 CWE-94 Medium
No
No
 - 14.10.2019 SB2019072612
SB2021012219
SB2022061803
and 14 more


Showing elements 21 - 40 out of 97