Known vulnerabilities in webMethods developer portal - page 2

Vendor: IBM Corporation
Software: webMethods developer portal
Software CPE: cpe:2.3:a:ibm_corporation:webmethods_developer_portal:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 56
Public exploits: 8
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting webMethods developer portal webMethods developer portal is affected by 56 known vulnerabilities: 1 critical, 7 high, 43 medium, 5 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146376 - Improper input validation
CVE-2026-40984		 CWE-20 Medium
No
No
 11.1 Fix16 31.08.2026 SB2026083148
SB2026083155
SB2026083156
and 7 more
#VU146375 - Improper input validation
CVE-2026-40983		 CWE-20 Medium
No
No
 11.1 Fix16 31.08.2026 SB2026083148
SB2026083156
SB2026083157
and 9 more
#VU144823 - Allocation of Resources Without Limits or Throttling
CVE-2026-57819		 CWE-770 Medium
No
No
 11.1 Fix16 24.08.2026 SB20260824145
SB2026090471
SB2026091109
and 4 more
#VU130205 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42584		 CWE-444 Medium
No
No
 11.1 Fix14 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 18 more
#VU107995 - Improper input validation
CVE-2025-31651		 CWE-20 Medium
Available
No
 11.1.6 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 46 more
#VU105485 - Improper input validation
CVE-2025-24813		 CWE-20 Critical
Available
Exploited
 11.1.6 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU101893 - Permissions, Privileges, and Access Controls
CVE-2024-56337		 CWE-264 High
No
No
 11.1.6 20.12.2024 SB2024122063
SB2025011311
SB2025011801
and 45 more
#VU101814 - Permissions, Privileges, and Access Controls
CVE-2024-50379		 CWE-264 Medium
Available
No
 11.1.6 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 57 more
#VU100588 - Improper Authentication
CVE-2024-52316		 CWE-287 Low
No
No
 11.1.6 18.11.2024 SB2024111823
SB2024112550
SB2024112832
and 37 more
#VU100587 - Resource Management Errors
CVE-2024-52317		 CWE-399 Medium
Available
No
 11.1.6 18.11.2024 SB2024111823
SB2024112550
SB2024121231
and 27 more
#VU97652 - Resource exhaustion
CVE-2024-38286		 CWE-400 Medium
No
No
 11.1.6 23.09.2024 SB2024092355
SB2024100267
SB2024102808
and 26 more
#VU93732 - Resource Management Errors
CVE-2024-34750		 CWE-399 Medium
No
No
 11.1.6 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU87510 - Improper input validation
CVE-2024-24549		 CWE-20 Medium
Available
No
 11.1.6 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 11.1.6 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU81800 - Resource Management Errors
CVE-2023-42795		 CWE-399 Medium
No
No
 11.1.6 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 48 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648		 CWE-444 Medium
No
No
 11.1.6 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 48 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 11.1.6 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 655 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Available
No
 11.1.6 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 52 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708		 CWE-614 Low
No
No
 11.1.6 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 54 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 11.1.6 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 203 more


Showing elements 21 - 40 out of 56