Known vulnerabilities in WebSphere Remote Server - page 8

Vendor: IBM Corporation
Software: WebSphere Remote Server
Software CPE: cpe:2.3:a:ibm_corporation:websphere_remote_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 210
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebSphere Remote Server WebSphere Remote Server is affected by 210 known vulnerabilities: 2 critical, 23 high, 114 medium, 71 low Critical High Medium Low

Vulnerabilities (210)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89792 - Insufficient Control of Network Message Volume (Network Amplification)
CVE-2024-25015		 CWE-406 Medium
No
No
 - 24.05.2024 SB2024052408
SB2024060320
SB2024070811
and 1 more
#VU89108 - Heap-based Buffer Overflow
CVE-2024-25048		 CWE-122 Low
No
No
 - 02.05.2024 SB2024050222
SB2024050224
SB2024052406
and 5 more
#VU88977 - Resource exhaustion
CVE-2024-25026		 CWE-400 Medium
No
No
 - 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 - 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354		 CWE-611 High
No
No
 - 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 - 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795		 CWE-113 Medium
No
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 38 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709		 CWE-113 Medium
No
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 63 more
#VU88130 - Improper input validation
CVE-2024-25046		 CWE-20 Low
No
No
 - 04.04.2024 SB2024040429
SB2024040521
SB2024040805
and 10 more
#VU88129 - Information Exposure Through Log Files
CVE-2024-25030		 CWE-532 Low
No
No
 - 04.04.2024 SB2024040428
SB2024040521
SB2024040805
and 9 more
#VU88127 - Improper input validation
CVE-2023-52296		 CWE-20 Low
No
No
 - 04.04.2024 SB2024040426
SB2024040521
SB2024040805
and 10 more
#VU88120 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50313		 CWE-327 Low
No
No
 - 04.04.2024 SB2024040414
SB2024040415
SB2024040439
and 16 more
#VU88070 - Resource exhaustion
CVE-2024-22360		 CWE-400 Low
No
No
 - 03.04.2024 SB2024040328
SB2024040521
SB2024040805
and 12 more
#VU88069 - Exposure of sensitive information to an unauthorized actor
CVE-2023-38729		 CWE-200 Low
No
No
 - 03.04.2024 SB2024040327
SB2024040521
SB2024040805
and 10 more
#VU88067 - Resource exhaustion
CVE-2024-27254		 CWE-400 Low
No
No
 - 03.04.2024 SB2024040325
SB2024040521
SB2024040805
and 10 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727		 CWE-476 Medium
No
No
 - 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU85469 - Improper input validation
CVE-2024-20952		 CWE-20 Medium
No
No
 - 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85399 - Resource Management Errors
CVE-2023-6237		 CWE-399 Low
No
No
 - 15.01.2024 SB2024011522
SB2024012250
SB2024012612
and 53 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 - 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU43781 - Improper input validation
CVE-2012-2677		 CWE-20 Medium
No
No
 - 25.07.2012 SB2012072516
SB2021052604
SB2024040312
and 16 more


Showing elements 141 - 160 out of 210