Known vulnerabilities in Truststore Manager

Vendor: IBM Corporation
Software: Truststore Manager
Software CPE: cpe:2.3:a:ibm_corporation:truststore_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Truststore Manager Truststore Manager is affected by 13 known vulnerabilities: 8 medium, 5 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111980 - Protection Mechanism Failure
CVE-2025-50182		 CWE-693 Low
No
No
 1.7.1 26.06.2025 SB2025062659
SB2025062660
SB2025062662
and 21 more
#VU111979 - Protection Mechanism Failure
CVE-2025-50181		 CWE-693 Low
No
No
 1.7.1 26.06.2025 SB2025062659
SB2025062660
SB2025062662
and 54 more
#VU111716 - Insufficiently Protected Credentials
CVE-2024-47081		 CWE-522 Medium
No
No
 1.7.1 21.06.2025 SB2025062111
SB2025062112
SB2025062113
and 95 more
#VU105387 - Improper input validation
CVE-2025-27516		 CWE-20 Low
No
No
 1.7.0 06.03.2025 SB2025030628
SB2025031001
SB2025031002
and 83 more
#VU101972 - Security Features
CVE-2024-56326		 CWE-254 Low
No
No
 1.6.2 27.12.2024 SB2024122789
SB2024122790
SB2024122791
and 78 more
#VU101971 - Security Features
CVE-2024-56201		 CWE-254 Low
No
No
 1.6.2 27.12.2024 SB2024122789
SB2025010203
SB2025010322
and 62 more
#VU101723 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-47621		 CWE-611 Medium
No
No
 1.6.0 11.12.2024 SB2024121198
SB2024121208
SB2025011711
and 2 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 1.6.0 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU96730 - Exposure of sensitive information to an unauthorized actor
CVE-2024-6221		 CWE-200 Medium
No
No
 1.6.0 03.09.2024 SB2024090356
SB2024092768
SB2024100968
and 5 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34064		 CWE-79 Medium
No
No
 1.6.0 20.05.2024 SB2024052067
SB2024052081
SB2024052082
and 83 more
#VU88199 - Observable discrepancy
CVE-2023-50782		 CWE-203 Medium
No
No
 1.5.3 08.04.2024 SB2024040815
SB2024040816
SB2024040817
and 35 more
#VU87129 - NULL Pointer Dereference
CVE-2024-26130		 CWE-476 Medium
No
No
 1.5.3 05.03.2024 SB2024030534
SB2024030535
SB2024030546
and 41 more
#VU85368 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-22195		 CWE-79 Medium
No
No
 1.5.3 15.01.2024 SB2024011508
SB2024011512
SB2024011513
and 60 more