Known vulnerabilities in webMethods Managed File Transfer - page 4

Vendor: IBM Corporation
Software: webMethods Managed File Transfer
Software CPE: cpe:2.3:a:ibm_corporation:webmethods_managed_file_transfer:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 90
Public exploits: 5
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting webMethods Managed File Transfer webMethods Managed File Transfer is affected by 90 known vulnerabilities: 1 critical, 7 high, 59 medium, 23 low Critical High Medium Low

Vulnerabilities (90)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107988 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2020-7772		 CWE-1321 Critical
No
No
 - 28.04.2025 SB2020111502
SB2025042830
#VU106260 - Heap-based Buffer Overflow
CVE-2023-6992		 CWE-122 Medium
No
No
 - 31.03.2025 SB2024011084
SB2025033113
SB2025042830
#VU93424 - Out-of-bounds read
CVE-2024-5535		 CWE-125 Low
Available
No
 - 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU89861 - Use After Free
CVE-2024-4741		 CWE-416 Medium
No
No
 - 29.05.2024 SB2024052912
SB2024060803
SB2024060804
and 89 more
#VU89624 - Resource Management Errors
CVE-2024-4603		 CWE-399 Low
No
No
 - 17.05.2024 SB2024051715
SB2024052732
SB2024060735
and 65 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 - 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU88144 - Improper input validation
CVE-2024-28182		 CWE-20 Medium
No
No
 - 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU87607 - Improper Access Control
CVE-2024-22257		 CWE-284 Medium
No
No
 - 19.03.2024 SB2024031915
SB2024041659
SB2024041660
and 26 more
#VU87160 - Use After Free
CVE-2024-0232		 CWE-416 Medium
No
No
 - 06.03.2024 SB2024030634
SB2024030638
SB2024071885
and 11 more
#VU85658 - Insufficient Verification of Data Authenticity
CVE-2023-7008		 CWE-345 Medium
No
No
 - 22.01.2024 SB2024012238
SB2024012239
SB2024012240
and 38 more
#VU85623 - Information Exposure Through Timing Discrepancy
CVE-2024-0553		 CWE-208 Medium
No
No
 - 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 78 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 654 more
#VU79296 - Insufficient Verification of Data Authenticity
CVE-2023-37920		 CWE-345 Medium
No
No
 - 09.08.2023 SB2023080939
SB20230821166
SB2023090820
and 89 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 - 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77351 - Improper input validation
CVE-2023-29499		 CWE-20 Medium
No
No
 - 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 35 more
#VU77350 - Resource exhaustion
CVE-2023-32611		 CWE-400 Medium
No
No
 - 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 31 more
#VU77349 - Resource exhaustion
CVE-2023-32665		 CWE-400 Medium
No
No
 - 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 31 more
#VU77252 - NULL Pointer Dereference
CVE-2023-2953		 CWE-476 Medium
No
No
 - 13.06.2023 SB2023061366
SB2023061417
SB2023061418
and 59 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602		 CWE-401 Medium
No
No
 - 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603		 CWE-98 High
No
No
 - 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more


Showing elements 61 - 80 out of 90