Known vulnerabilities in webMethods ControlPlane 11.1 Fix8 - page 2

Vendor: IBM Corporation
Software: webMethods ControlPlane
Version: 11.1 Fix8
Software CPE: cpe:2.3:a:ibm_corporation:webmethods_controlplane:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 44
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting webMethods ControlPlane version 11.1 Fix8 webMethods ControlPlane 11.1 Fix8 is affected by 44 vulnerabilities: 5 high, 34 medium, 5 low Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149011 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-54265		 CWE-79 Medium
No
No
 11.1 Fix11 11.09.2026 SB2026091147
SB2026100514
#VU149006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-50557		 CWE-79 Medium
No
No
 11.1 Fix11 11.09.2026 SB2026082072
SB2026100514
#VU146376 - Improper input validation
CVE-2026-40984		 CWE-20 Medium
No
No
 11.1 Fix11 31.08.2026 SB2026083148
SB2026083155
SB2026083156
and 7 more
#VU146375 - Improper input validation
CVE-2026-40983		 CWE-20 Medium
No
No
 11.1 Fix11 31.08.2026 SB2026083148
SB2026083156
SB2026083157
and 9 more
#VU144823 - Allocation of Resources Without Limits or Throttling
CVE-2026-57819		 CWE-770 Medium
No
No
 11.1 Fix11 24.08.2026 SB20260824145
SB2026090471
SB2026091109
and 4 more
#VU140085 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-69151		 CWE-79 Low
No
No
 11.1 Fix11 30.07.2026 SB2026073016
SB2026090808
SB2026091022
and 1 more
#VU139253 - Missing Release of Resource after Effective Lifetime
CVE-2026-73508		 CWE-772 Medium
No
No
 11.1 Fix11 24.07.2026 SB2026072404
SB2026100604
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512		 CWE-502 High
No
No
 11.1 Fix11 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 37 more
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513		 CWE-184 High
No
No
 11.1 Fix11 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 39 more
#VU138901 - Improper Access Control
CVE-2026-56746		 CWE-284 Medium
No
No
 11.1 Fix11 21.07.2026 SB2026072182
SB2026080509
SB2026091105
and 2 more
#VU137576 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-59921		 CWE-93 Low
No
No
 11.1 Fix11 15.07.2026 SB2026071505
SB2026080509
SB2026090818
and 1 more
#VU137572 - Resource exhaustion
CVE-2026-55831		 CWE-400 Medium
No
No
 11.1 Fix11 15.07.2026 SB2026071505
SB2026080509
SB2026083172
and 7 more
#VU137571 - Improper input validation
CVE-2026-55833		 CWE-20 Medium
No
No
 11.1 Fix11 15.07.2026 SB2026071505
SB2026080509
SB2026083172
and 7 more
#VU137568 - Missing Release of Resource after Effective Lifetime
CVE-2026-56745		 CWE-772 Medium
No
No
 11.1 Fix11 15.07.2026 SB2026071505
SB2026080509
SB2026083172
and 7 more
#VU137563 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-59901		 CWE-835 Medium
No
No
 11.1 Fix11 15.07.2026 SB2026071505
SB2026080509
SB2026083172
and 7 more
#VU137562 - Improper input validation
CVE-2026-59900		 CWE-20 Medium
No
No
 11.1 Fix11 15.07.2026 SB2026071505
SB2026080509
SB2026100604
#VU137560 - Allocation of Resources Without Limits or Throttling
CVE-2026-59899		 CWE-770 Medium
No
No
 11.1 Fix11 15.07.2026 SB2026071505
SB2026080509
SB2026090818
and 2 more
#VU137559 - Improper input validation
CVE-2026-59898		 CWE-20 Medium
No
No
 11.1 Fix11 15.07.2026 SB2026071505
SB2026080509
SB2026100604
#VU130208 - Null Byte Interaction Error (Poison Null Byte)
CVE-2026-42579		 CWE-626 Medium
No
No
 11.1 Fix11 05.05.2026 SB20260505124
SB2026060936
SB2026060963
and 11 more
#VU130205 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42584		 CWE-444 Medium
No
No
 11.1 Fix11 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 18 more


Showing elements 21 - 40 out of 44