Known vulnerabilities in z/Transaction Processing Facility ( z/TPF) - page 5

Vendor: IBM Corporation
Software: z/Transaction Processing Facility ( z/TPF)
Software CPE: cpe:2.3:a:ibm_corporation:ztpf:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 127
Public exploits: 17
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting z/Transaction Processing Facility ( z/TPF) z/Transaction Processing Facility ( z/TPF) is affected by 127 known vulnerabilities: 51 high, 50 medium, 26 low Critical High Medium Low

Vulnerabilities (127)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU49368 - Deserialization of Untrusted Data
CVE-2020-36179		 CWE-502 High
No
No
 - 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 18 more
#VU49369 - Deserialization of Untrusted Data
CVE-2020-36180		 CWE-502 High
Available
No
 - 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 16 more
#VU49370 - Deserialization of Untrusted Data
CVE-2020-36182		 CWE-502 High
No
No
 - 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 17 more
#VU49371 - Deserialization of Untrusted Data
CVE-2020-36183		 CWE-502 High
No
No
 - 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 15 more
#VU49376 - Deserialization of Untrusted Data
CVE-2020-36187		 CWE-502 High
No
No
 - 07.01.2021 SB2021011105
SB2021042826
SB2021050708
and 16 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 - 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU47105 - Deserialization of Untrusted Data
CVE-2020-24750		 CWE-502 High
Available
No
 - 17.09.2020 SB2020092506
SB2020100512
SB2021012013
and 28 more
#VU27032 - Deserialization of Untrusted Data
CVE-2020-11620		 CWE-502 High
No
No
 - 20.04.2020 SB2020030909
SB2020052628
SB2020073033
and 15 more
#VU26494 - Deserialization of Untrusted Data
CVE-2020-10673		 CWE-502 High
Available
No
 - 01.04.2020 SB2020030909
SB2020073033
SB2022060909
and 17 more
#VU25831 - Deserialization of Untrusted Data
CVE-2020-9547		 CWE-502 High
Available
No
 - 09.03.2020 SB2020030909
SB2020073033
SB2022060909
and 13 more
#VU21593 - Improper input validation
CVE-2019-16943		 CWE-20 Medium
No
No
 - 07.10.2019 SB2019100711
SB2019100716
SB2019120206
and 34 more
#VU21470 - Improper input validation
CVE-2019-10202		 CWE-20 High
No
No
 - 01.10.2019 SB2019100116
SB2019100117
SB2019100118
and 23 more
#VU19941 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12086		 CWE-200 Medium
No
No
 - 06.08.2019 SB2019052407
SB2019092703
SB2019100116
and 29 more
#VU19018 - Deserialization of Untrusted Data
CVE-2019-12384		 CWE-502 High
No
No
 - 04.07.2019 SB2019091218
SB2019092703
SB2019100116
and 28 more
#VU18961 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12814		 CWE-200 Medium
No
No
 - 02.07.2019 SB2019062606
SB2019092703
SB2019100116
and 25 more
#VU17777 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-14720		 CWE-611 Low
No
No
 - 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 21 more
#VU11268 - Deserialization of Untrusted Data
CVE-2018-7489		 CWE-502 High
No
No
 - 26.03.2018 SB2018021604
SB2018041910
SB2018050306
and 27 more
#VU10610 - Deserialization of Untrusted Data
CVE-2018-5968		 CWE-502 High
No
No
 - 16.02.2018 SB2018021604
SB2018021605
SB2018051725
and 13 more
#VU9607 - Improper input validation
CVE-2017-15095		 CWE-20 High
No
No
 - 08.12.2017 SB2017121101
SB2017111609
SB2018051424
and 27 more


Showing elements 81 - 100 out of 127