Known vulnerabilities in watsonx Assistant Cartridge - page 8

Vendor: IBM Corporation
Software: watsonx Assistant Cartridge
Software CPE: cpe:2.3:a:ibm_corporation:watsonx_assistant_cartridge:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 200
Public exploits: 16
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting watsonx Assistant Cartridge watsonx Assistant Cartridge is affected by 200 known vulnerabilities: 5 critical, 48 high, 82 medium, 65 low Critical High Medium Low

Vulnerabilities (200)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101616 - Type confusion
CVE-2024-12381		 CWE-843 High
No
No
 5.1.1 10.12.2024 SB2024121101
SB2024121240
SB2024121241
and 8 more
#VU101617 - Use After Free
CVE-2024-12382		 CWE-416 High
No
No
 5.1.1 10.12.2024 SB2024121101
SB2024121240
SB2024121241
and 8 more
#VU101184 - Type confusion
CVE-2024-12053		 CWE-843 High
No
No
 5.1.1 03.12.2024 SB20241203114
SB2024120523
SB2024120524
and 8 more
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141		 CWE-200 Medium
No
No
 5.1.1 21.11.2024 SB2024112150
SB2024120226
SB2024120331
and 34 more
#VU100601 - Missing release of memory after effective lifetime
CVE-2024-52303		 CWE-401 Medium
No
No
 5.1.1 19.11.2024 SB2024111901
SB2024121313
SB2025031422
and 4 more
#VU100588 - Improper Authentication
CVE-2024-52316		 CWE-287 Low
No
No
 5.1.1 18.11.2024 SB2024111823
SB2024112550
SB2024112832
and 36 more
#VU100587 - Resource Management Errors
CVE-2024-52317		 CWE-399 Medium
Available
No
 5.1.1 18.11.2024 SB2024111823
SB2024112550
SB2024121231
and 27 more
#VU100318 - Permissions, Privileges, and Access Controls
CVE-2024-11115		 CWE-264 Medium
No
No
 5.1.1 12.11.2024 SB20241112116
SB2024111460
SB2024112232
and 9 more
#VU100319 - Improperly Implemented Security Check for Standard
CVE-2024-11116		 CWE-358 Low
No
No
 5.1.1 12.11.2024 SB20241112116
SB2024111460
SB2024112232
and 9 more
#VU98828 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-9675		 CWE-22 Low
No
No
 5.1.1 21.10.2024 SB2024102103
SB2024102104
SB2024102107
and 51 more
#VU98024 - Improper input validation
CVE-2024-47561		 CWE-20 High
No
No
 5.1.1 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 5.1.1 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU96049 - UNIX Symbolic Link (Symlink) Following
CVE-2024-42472		 CWE-61 Low
No
No
 5.1.1 15.08.2024 SB2024081541
SB2024081542
SB2024081553
and 29 more
#VU94616 - Information Exposure Through Log Files
CVE-2024-6104		 CWE-532 Low
No
No
 5.1.1 19.07.2024 SB2024071927
SB2024071929
SB2024071930
and 83 more
#VU87583 - Improper input validation
CVE-2024-21503		 CWE-20 Medium
No
No
 5.1.1 18.03.2024 SB2024031822
SB2024050632
SB2024061929
and 7 more
#VU84669 - Stack-based buffer overflow
CVE-2023-44431		 CWE-121 Medium
No
No
 5.1.1 22.12.2023 SB2023122020
SB2024111244
SB2024111914
and 4 more
#VU84605 - Heap-based Buffer Overflow
CVE-2023-50229		 CWE-122 Medium
No
No
 5.1.1 20.12.2023 SB2023122020
SB2024011936
SB2024011937
and 12 more
#VU84603 - Heap-based Buffer Overflow
CVE-2023-50230		 CWE-122 Medium
No
No
 5.1.1 20.12.2023 SB2023122020
SB2024011936
SB2024011937
and 13 more
#VU83831 - Improper input validation
CVE-2023-45866		 CWE-20 Medium
Available
No
 5.1.1 04.12.2023 SB2023120445
SB2023120701
SB2023120721
and 19 more
#VU75105 - Memory corruption
CVE-2023-27349		 CWE-119 Low
No
No
 5.1.1 13.04.2023 SB2023041354
SB2023061925
SB2023061939
and 16 more


Showing elements 141 - 160 out of 200