Known vulnerabilities in IBM Security Identity Governance and Intelligence (IGI)

Vendor: IBM Corporation
Software: IBM Security Identity Governance and Intelligence (IGI)
Software CPE: cpe:2.3:a:ibm_corporation:security_identity_governance_and_intelligence:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 23
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Security Identity Governance and Intelligence (IGI) IBM Security Identity Governance and Intelligence (IGI) is affected by 23 known vulnerabilities: 1 high, 12 medium, 10 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63713 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2020-4970		 CWE-300 Medium
No
No
 5.2.6.0-ISS-SIGI-FP0004 26.05.2022 SB2022051923
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 - 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550		 CWE-300 Medium
No
No
 5.2.6.0-ISS-SIGI-FP0004 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU57495 - Improper input validation
CVE-2021-35578		 CWE-20 Medium
No
No
 5.2.5.0-ISS-SIGI-FP0003, 5.2.6.0-ISS-SIGI-FP0004 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 95 more
#VU57496 - Improper input validation
CVE-2021-35603		 CWE-20 Low
No
No
 5.2.4.0-ISS-SIGI-FP0003, 5.2.6.0-ISS-SIGI-FP0004 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 112 more
#VU34122 - Session Fixation
CVE-2020-4243		 CWE-384 Low
No
No
 - 05.08.2020 SB2020080519
#VU28367 - Command injection
CVE-2020-4231		 CWE-77 Medium
No
No
 - 29.05.2020 SB2020052915
#VU28366 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4232		 CWE-200 Low
No
No
 - 29.05.2020 SB2020052915
#VU28365 -
CVE-2020-4233		 Low
No
No
 - 29.05.2020 SB2020052915
#VU28364 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4244		 CWE-200 Low
No
No
 - 29.05.2020 SB2020052915
#VU28363 - Weak Password Requirements
CVE-2020-4245		 CWE-521 Low
No
No
 - 29.05.2020 SB2020052915
#VU28362 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-4246		 CWE-611 Medium
No
No
 - 29.05.2020 SB2020052915
#VU28361 -
CVE-2020-4248		 Low
No
No
 - 29.05.2020 SB2020052915
#VU28360 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4249		 CWE-200 Low
No
No
 - 29.05.2020 SB2020052915
#VU36713 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-1756		 CWE-89 Medium
Available
No
 - 07.09.2018 SB2018090722
#VU36714 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1757		 CWE-200 Medium
No
No
 - 07.09.2018 SB2018090722
#VU36788 - Inadequate Encryption Strength
CVE-2017-1366		 CWE-326 Medium
No
No
 - 06.08.2018 SB2018080625
#VU36789 - Session Fixation
CVE-2017-1368		 CWE-384 Medium
No
No
 - 06.08.2018 SB2018080625
#VU36790 - Improper input validation
CVE-2017-1396		 CWE-20 High
No
No
 - 06.08.2018 SB2018080625
#VU36791 - Exposure of sensitive information to an unauthorized actor
CVE-2017-1409		 CWE-200 Medium
No
No
 - 06.08.2018 SB2018080625


Showing elements 1 - 20 out of 23