Known vulnerabilities in watsonx Assistant Cartridge - page 10

Vendor: IBM Corporation
Software: watsonx Assistant Cartridge
Software CPE: cpe:2.3:a:ibm_corporation:watsonx_assistant_cartridge:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 200
Public exploits: 16
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting watsonx Assistant Cartridge watsonx Assistant Cartridge is affected by 200 known vulnerabilities: 5 critical, 48 high, 82 medium, 65 low Critical High Medium Low

Vulnerabilities (200)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96744 - Type confusion
CVE-2024-6119		 CWE-843 Medium
No
No
 5.1.1 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU95605 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-7348		 CWE-367 Low
No
No
 5.1.1 08.08.2024 SB2024080866
SB2024080954
SB2024080955
and 63 more
#VU95571 - Command injection
CVE-2024-6923		 CWE-77 Medium
No
No
 5.1.1 08.08.2024 SB2024080861
SB2024080862
SB2024080863
and 144 more
#VU95157 - Incorrect Provision of Specified Functionality
CVE-2024-4032		 CWE-684 Medium
No
No
 5.1.1 02.08.2024 SB2024080203
SB2024080207
SB2024080209
and 101 more
#VU95043 - Integer overflow
CVE-2023-33976		 CWE-190 Medium
No
No
 5.1.1 31.07.2024 SB20240731126
SB2024093013
SB2025022529
and 1 more
#VU93882 - Permissions, Privileges, and Access Controls
CVE-2024-22018		 CWE-264 Low
No
No
 5.1.1 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 15 more
#VU93881 - Permissions, Privileges, and Access Controls
CVE-2024-36137		 CWE-264 Low
No
No
 5.1.1 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 23 more
#VU93880 - Server-Side Request Forgery (SSRF)
CVE-2024-22020		 CWE-918 Medium
No
No
 5.1.1 09.07.2024 SB2024070937
SB2024071636
SB20240717119
and 30 more
#VU93077 - Improper input validation
CVE-2024-38428		 CWE-20 Medium
No
No
 5.1.1 22.06.2024 SB2024062208
SB2024062219
SB2024062421
and 45 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 5.1.1 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262		 CWE-918 Medium
No
No
 5.1.1 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34064		 CWE-79 Medium
No
No
 5.1.1 20.05.2024 SB2024052067
SB2024052081
SB2024052082
and 83 more
#VU89351 - Insufficient Verification of Data Authenticity
CVE-2024-34397		 CWE-345 Low
No
No
 5.1.1 10.05.2024 SB2024051042
SB2024051043
SB2024051044
and 88 more
#VU89297 - Missing Authorization
CVE-2024-4317		 CWE-862 Low
No
No
 5.1.1 09.05.2024 SB2024050940
SB2024051519
SB2024051525
and 28 more
#VU89149 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-34069		 CWE-94 Medium
No
No
 5.1.1 06.05.2024 SB2024050606
SB2024050723
SB2024050930
and 54 more
#VU87685 - Resource exhaustion
CVE-2024-0450		 CWE-400 Medium
No
No
 5.1.1 21.03.2024 SB2024032107
SB2024032110
SB2024040848
and 80 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259		 CWE-918 Medium
No
No
 5.1.1 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU86695 - Server-Side Request Forgery (SSRF)
CVE-2024-22243		 CWE-918 Medium
Available
No
 5.1.1 21.02.2024 SB2024022140
SB2024030406
SB2024030529
and 45 more
#VU85368 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-22195		 CWE-79 Medium
No
No
 5.1.1 15.01.2024 SB2024011508
SB2024011512
SB2024011513
and 60 more
#VU79455 - Permissions, Privileges, and Access Controls
CVE-2023-39418		 CWE-264 Low
No
No
 5.1.1 11.08.2023 SB2023081132
SB2023081716
SB2023081720
and 22 more


Showing elements 181 - 200 out of 200