Known vulnerabilities in Virtualization Engine TS7700 3957-VEC
Vendor:
IBM Corporation
Software:
Virtualization Engine TS7700 3957-VEC
Software CPE:
cpe:2.3:h:ibm_corporation:virtualization_engine_ts7700_3957-vec:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
35
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
8.41.200.113 VTD_EXEC.269
8.41.101.10 VTD_EXEC.269
8.40.2.12 VTD_EXEC.269
8.40.0.71
8.40.2.12 VTD_EXEC.279
8.41.200.113 VTD_EXEC.279
8.41.101.10 VTD_EXEC.103
8.52.103.23 VTD_EXEC.901
8.52.103.23 VTD_EXEC.279
8.52.103.23 VTD_EXEC.269
8.53.1.21 VTD_EXEC.269
8.51.2.12 VTD_EXEC.900
8.52.102.13 VTD_EXEC.901
8.52.200.111 VTD_EXEC.902
8.53.0.63 VTD_EXEC.903
8.52.102.13 VTD_EXEC.279
8.53.0.63 VTD_EXEC.279
8.53.0.63 VTD_EXEC.269
8.51.2.12
8.52.102.13
8.52.200.111
8.53.0.63
8.52.200.111 VTD_EXEC.269
8.52.102.13 VTD_EXEC.269
8.51.2.12 VTD_EXEC.269
8.50.2.6 VTD_EXEC.269
8.52.200.111 VTD_EXEC.279
8.52.101.12 VTD_EXEC.279
8.51.2.12 VTD_EXEC.279
8.50.2.6 VTD_EXEC.279
8.50.2.6
8.51.1.26
Vulnerabilities (35)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU91591 - Exposure of sensitive information to an unauthorized actor CVE-2023-49877 |
CWE-200 | Low | 8.52.103.23 VTD_EXEC.901 | 10.06.2024 |
SB2024061016 |
||
| #VU91590 - Information Exposure Through an Error Message CVE-2023-49878 |
CWE-209 | Low | 8.52.103.23 VTD_EXEC.901 | 10.06.2024 |
SB2024061016 |
||
| #VU83267 - Improper input validation CVE-2023-5676 |
CWE-20 | Low | 8.52.103.23 VTD_EXEC.269 | 20.11.2023 |
SB2023112010 SB2023112011 SB2023112726 and 101 more |
||
| #VU82141 - Improper input validation CVE-2023-22081 |
CWE-20 | Medium | 8.52.103.23 VTD_EXEC.269 | 17.10.2023 |
SB2023101797 SB2023101798 SB2023101905 and 187 more |
||
| #VU75508 - Exposure of sensitive information to an unauthorized actor CVE-2023-30441 |
CWE-200 | Medium | 8.51.2.12 VTD_EXEC.269, 8.52.102.13 VTD_EXEC.269, 8.52.103.23 VTD_EXEC.269, 8.53.0.63 VTD_EXEC.269, 8.53.1.21 VTD_EXEC.269 | 26.04.2023 |
SB2023042618 SB2023042749 SB2023050107 and 41 more |
||
| #VU75264 - Improper input validation CVE-2023-21939 |
CWE-20 | Medium | 8.52.102.13 VTD_EXEC.269, 8.52.103.23 VTD_EXEC.269 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 179 more |
||
| #VU75266 - Improper input validation CVE-2023-21968 |
CWE-20 | Low | 8.52.102.13 VTD_EXEC.269, 8.52.103.23 VTD_EXEC.269 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 179 more |
||
| #VU75267 - Improper input validation CVE-2023-21937 |
CWE-20 | Low | 8.52.102.13 VTD_EXEC.269, 8.52.103.23 VTD_EXEC.269 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 184 more |
||
| #VU75261 - Improper input validation CVE-2023-21967 |
CWE-20 | Medium | 8.52.102.13 VTD_EXEC.269, 8.52.103.23 VTD_EXEC.269 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 189 more |
||
| #VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998 |
CWE-770 | Medium | 8.52.103.23 VTD_EXEC.901 | 20.02.2023 |
SB2023022046 SB2023022047 SB2023030917 and 202 more |
||
| #VU71995 - Use After Free CVE-2023-0215 |
CWE-416 | Medium | 8.51.2.12 VTD_EXEC.279, 8.52.102.13 VTD_EXEC.279, 8.52.103.23 VTD_EXEC.279 | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 209 more |
||
| #VU71993 - Information Exposure Through Timing Discrepancy CVE-2022-4304 |
CWE-208 | Medium | 8.51.2.12 VTD_EXEC.279, 8.52.102.13 VTD_EXEC.279, 8.52.103.23 VTD_EXEC.279 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020767 and 222 more |
||
| #VU71992 - Type confusion CVE-2023-0286 |
CWE-843 | High | 8.51.2.12 VTD_EXEC.279, 8.52.102.13 VTD_EXEC.279, 8.52.103.23 VTD_EXEC.279 | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 223 more |
||
| #VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-34165 |
CWE-444 | Medium | 8.51.2.12 VTD_EXEC.900, 8.52.102.13 VTD_EXEC.901, 8.52.200.111 VTD_EXEC.902, 8.53.0.63 VTD_EXEC.903 | 10.11.2022 |
SB2022111029 SB2022111104 SB2022111409 and 58 more |
||
| #VU68438 - Improper input validation CVE-2022-21626 |
CWE-20 | Medium | 8.51.2.12 VTD_EXEC.269, 8.52.102.13 VTD_EXEC.269, 8.52.200.111 VTD_EXEC.269, 8.53.0.63 VTD_EXEC.269 | 18.10.2022 |
SB2022101901 SB2022101902 SB2022102012 and 157 more |
||
| #VU65845 - Authentication Bypass by Spoofing CVE-2022-22476 |
CWE-290 | Medium | 8.51.2.12 VTD_EXEC.900, 8.52.102.13 VTD_EXEC.901, 8.52.200.111 VTD_EXEC.902, 8.53.0.63 VTD_EXEC.903 | 28.07.2022 |
SB2022072816 SB2022080903 SB2022082228 and 29 more |
||
| #VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-2068 |
CWE-78 | Medium | 8.51.2.12 VTD_EXEC.279, 8.52.102.13 VTD_EXEC.279, 8.52.200.111 VTD_EXEC.279, 8.53.0.63 VTD_EXEC.279 | 21.06.2022 |
SB2022062120 SB2022062125 SB2022062236 and 135 more |
||
| #VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-1292 |
CWE-78 | Medium | 8.50.2.6 VTD_EXEC.279, 8.51.2.12 VTD_EXEC.279, 8.52.101.12 VTD_EXEC.279, 8.52.200.111 VTD_EXEC.279 | 03.05.2022 |
SB2022050315 SB2022050436 SB2022050503 and 141 more |
||
| #VU62400 - Improper input validation CVE-2022-21496 |
CWE-20 | Medium | 8.50.2.6 VTD_EXEC.269, 8.51.2.12 VTD_EXEC.269, 8.52.102.13 VTD_EXEC.269, 8.52.200.111 VTD_EXEC.269 | 19.04.2022 |
SB2022041944 SB2022041945 SB2022042102 and 118 more |
||
| #VU52449 - Improper input validation CVE-2021-2163 |
CWE-20 | Medium | 8.51.2.12 VTD_EXEC.269, 8.52.102.13 VTD_EXEC.269, 8.52.200.111 VTD_EXEC.269, 8.53.0.63 VTD_EXEC.269 | 21.04.2021 |
SB2021042115 SB2021042116 SB2021042117 and 99 more |
Showing elements 1 - 20 out of 35