Known vulnerabilities in WebSphere eXtreme Scale - page 4

Software CPE: cpe:2.3:a:ibm_corporation:websphere_extreme_scale:*:*:*:*:*:*:*:*
Total vulnerabilities: 85
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebSphere eXtreme Scale WebSphere eXtreme Scale is affected by 85 known vulnerabilities: 4 high, 45 medium, 36 low Critical High Medium Low

Vulnerabilities (85)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75267 - Improper input validation
CVE-2023-21937
CWE-20 Low
No
No
8.6.1.5 PH55403 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU75261 - Improper input validation
CVE-2023-21967
CWE-20 Medium
No
No
8.6.1.5 PH55403 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU71288 - Improper input validation
CVE-2023-21830
CWE-20 Medium
No
No
8.6.1.5 PH55403 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU68437 - Improper input validation
CVE-2022-21628
CWE-20 Medium
No
No
8.6.1.5 PH51696 iFix 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 138 more
#VU68438 - Improper input validation
CVE-2022-21626
CWE-20 Medium
No
No
8.6.1.5 PH51696 iFix 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68441 - Improper input validation
CVE-2022-21624
CWE-20 Low
No
No
8.6.1.5 PH51696 iFix 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU68442 - Improper input validation
CVE-2022-21619
CWE-20 Low
No
No
8.6.1.5 PH51696 iFix 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 140 more
#VU62399 - Improper input validation
CVE-2022-21426
CWE-20 Medium
No
No
8.6.1.5 PH55403 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU62400 - Improper input validation
CVE-2022-21496
CWE-20 Medium
No
No
- 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 118 more
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550
CWE-300 Medium
No
No
- 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU57494 - Improper input validation
CVE-2021-35565
CWE-20 Medium
No
No
- 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 78 more
#VU57495 - Improper input validation
CVE-2021-35578
CWE-20 Medium
No
No
- 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 95 more
#VU57496 - Improper input validation
CVE-2021-35603
CWE-20 Low
No
No
- 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 112 more
#VU28228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7656
CWE-79 Medium
No
No
8.6.1.5 PH53340 25.05.2020 SB2020052520
SB2020100907
SB2022072056
and 14 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
8.6.1.5 PH53340 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022
CWE-79 Low
Available
No
8.6.1.5 PH53340 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU18263 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-6708
CWE-79 Medium
Available
No
8.6.1.5 PH53340 15.04.2019 SB2012072101
SB2019100301
SB2020033103
and 15 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358
CWE-1321 Low
Available
No
8.6.1.5 PH53340 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU36773 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2018-15494
CWE-74 High
No
No
8.6.1.5 PH53340 18.08.2018 SB2018081804
SB2022070505
SB2022082433
and 11 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251
CWE-79 Low
No
No
8.6.1.5 PH53340 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more


Showing elements 61 - 80 out of 85