Known vulnerabilities in webMethods Managed File Transfer - page 3

Vendor: IBM Corporation
Software: webMethods Managed File Transfer
Software CPE: cpe:2.3:a:ibm_corporation:webmethods_managed_file_transfer:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 90
Public exploits: 5
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting webMethods Managed File Transfer webMethods Managed File Transfer is affected by 90 known vulnerabilities: 1 critical, 7 high, 59 medium, 23 low Critical High Medium Low

Vulnerabilities (90)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106260 - Heap-based Buffer Overflow
CVE-2023-6992		 CWE-122 Medium
No
No
 - 31.03.2025 SB2024011084
SB2025033113
SB2025042830
#VU89712 - Stack-based buffer overflow
CVE-2024-33599		 CWE-121 High
No
No
 - 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 84 more
#VU89710 - Allocation of Resources Without Limits or Throttling
CVE-2024-33601		 CWE-770 Low
No
No
 - 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 82 more
#VU88822 - Memory corruption
CVE-2024-2961		 CWE-119 High
Available
Exploited
 - 18.04.2024 SB2024041855
SB2024041856
SB2024041857
and 107 more
#VU87615 - Resource exhaustion
CVE-2023-52428		 CWE-400 Medium
No
No
 - 19.03.2024 SB2024031924
SB2024040107
SB2024041643
and 43 more
#VU87607 - Improper Access Control
CVE-2024-22257		 CWE-284 Medium
No
No
 - 19.03.2024 SB2024031915
SB2024041659
SB2024041660
and 26 more
#VU87339 - Information Exposure Through Timing Discrepancy
CVE-2024-2236		 CWE-208 Medium
No
No
 - 11.03.2024 SB2024031137
SB2024031141
SB2024111242
and 59 more
#VU87160 - Use After Free
CVE-2024-0232		 CWE-416 Medium
No
No
 - 06.03.2024 SB2024030634
SB2024030638
SB2024071885
and 11 more
#VU86900 - Improper input validation
CVE-2024-21742		 CWE-20 Medium
No
No
 - 28.02.2024 SB2024022829
SB2024032934
SB2024042476
and 12 more
#VU85927 - Improper Check for Certificate Revocation
CVE-2024-0853		 CWE-299 Low
No
No
 - 31.01.2024 SB2024013108
SB2024020838
SB2024032231
and 10 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727		 CWE-476 Medium
No
No
 - 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU85658 - Insufficient Verification of Data Authenticity
CVE-2023-7008		 CWE-345 Medium
No
No
 - 22.01.2024 SB2024012238
SB2024012239
SB2024012240
and 38 more
#VU85268 - Cross-Site Request Forgery (CSRF)
CVE-2023-5455		 CWE-352 Medium
No
No
 - 10.01.2024 SB2024011032
SB2024011039
SB2024011040
and 17 more
#VU80801 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4641		 CWE-200 Low
No
No
 - 14.09.2023 SB2023091453
SB2023091455
SB2023101019
and 66 more
#VU79296 - Insufficient Verification of Data Authenticity
CVE-2023-37920		 CWE-345 Medium
No
No
 - 09.08.2023 SB2023080939
SB20230821166
SB2023090820
and 89 more
#VU68281 - Incorrect Regular Expression
CVE-2021-3765		 CWE-185 Medium
No
No
 - 12.10.2022 SB2021110231
SB2022101269
SB2022101801
and 8 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 - 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU63553 - Integer overflow
CVE-2021-43618		 CWE-190 Medium
No
No
 - 24.05.2022 SB2021121654
SB2022052401
SB2021120223
and 85 more
#VU59358 - Uncontrolled Recursion
CVE-2021-3997		 CWE-674 Low
No
No
 - 10.01.2022 SB2022011041
SB2022011194
SB2022011325
and 10 more
#VU48269 - Security Features
CVE-2020-17049		 CWE-254 Low
No
No
 - 10.11.2020 SB2020111029
SB2021111015
SB2022121006
and 18 more


Showing elements 41 - 60 out of 90