Recently modified vulnerabilities for "ibm data virtualization on cloud pak for data" 1.8

7.5

Exploited

Zeroday

First published (updated )

CVE-2023-44487

IBM Data Virtualization on Cloud Pak for DataDoS Vulnerability in JSON-Java

7.5

First published (updated )

CVE-2023-5072

IBM Data Virtualization on Cloud Pak for DataAn unspecified vulnerability in Oracle MySQL Connectors related to the Connector/J component could a…

8.3

First published (updated )

CVE-2023-22102

Apple iOS, iPadOS, and watchOSInteger Overflow, Input Validation, Race Condition, Double Free

7.5

First published (updated )

CVE-2022-40303

Apple iOS, iPadOS, and watchOSDouble Free, Input Validation, Race Condition, Integer Overflow

7.8

First published (updated )

CVE-2022-40304

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

IBM Data Virtualization on Cloud Pak for DataProxy-Authorization header kept across hosts in follow-redirects

6.5

EPSS

0.04%

First published (updated )

CVE-2024-28849

IBM Data Virtualization on Cloud Pak for DataApache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree

6.5

EPSS

0.04%

First published (updated )

CVE-2024-29133

IBM Data Virtualization on Cloud Pak for DataApache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()

7.3

EPSS

0.04%

First published (updated )

CVE-2024-29131

IBM Data Virtualization on Cloud Pak for DataExpress.js Open Redirect in malformed URLs

6.1

EPSS

0.04%

First published (updated )

CVE-2024-29041

IBM Data Virtualization on Cloud Pak for DataAsync <= 2.6.4 and <= 3.2.5 are vulnerable to ReDoS (Regular Expression Denial of Service) whi…

7.5

First published (updated )

CVE-2024-39249

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

IBM Data Virtualization on Cloud Pak for DataTampering by prototype polution in DOMPurify

7.3

First published (updated )

CVE-2024-45801

IBM Data Virtualization on Cloud Pak for DataPostCSS could allow a remote attacker to bypass security restrictions, caused by improper input vali…

5.3

First published (updated )

CVE-2023-44270

IBM Data Virtualization on Cloud Pak for DataRemote Code execution in SnakeYAML

critical

9.8

First published (updated )

CVE-2022-1471

IBM Data Virtualization on Cloud Pak for DataVersions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to impro…

critical

9.8

First published (updated )

CVE-2023-26136

IBM Data Virtualization on Cloud Pak for Datajsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled

6.1

First published (updated )

CVE-2022-36033

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

IBM Db2IBM Db2 for Linux, UNIX and Windows denial of service

6.5

First published (updated )

CVE-2024-22360

FasterXML jackson-databindA flaw was found in Jackson Databind. This issue may allow a malicious user to cause a denial of ser…

7.5

First published (updated )

CVE-2021-46877

IBM Data Virtualization on Cloud Pak for DataInfinite loop in JSON unmarshaling in google.golang.org/protobuf

7.5

EPSS

0.04%

First published (updated )

CVE-2024-24786

IBM Data Virtualization on Cloud Pak for DataUnbounded memory consumption when reading headers in archive/tar

7.5

First published (updated )

CVE-2022-2879

Juniper Security Threat Response ManagerApache commons_text(CVE-2022-42889) and commons_configuration (CVE-2022-33980) vulnerability

critical

9.8

First published (updated )

CVE-2022-42889

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/eap7-jettisonBuffer Overflow

7.5

First published (updated )

CVE-2022-45693

redhat/rh-sso7-keycloakApache CXF directory listing / code exfiltration

7.5

First published (updated )

CVE-2022-46363

IBM Data Virtualization on Cloud Pak for DataIBM Watson Query on Cloud Pak for Data information disclosure

5.3

First published (updated )

CVE-2024-22341

IBM Data Virtualization on Cloud Pak for DataInput Validation

7.3

First published (updated )

CVE-2023-26159

IBM Data Virtualization on Cloud Pak for DataIBM Db2 denial of service

6.5

First published (updated )

CVE-2023-47746

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

IBM Data Virtualization on Cloud Pak for DataIBM Db2 denial of service

6.5

First published (updated )

CVE-2023-50308

IBM Data Virtualization on Cloud Pak for DataIBM Db2 denial of service

7.5

First published (updated )

CVE-2023-45193

IBM Data Virtualization on Cloud Pak for DataIBM Db2 denial of service

6.5

First published (updated )

CVE-2023-47747

IBM Data Virtualization on Cloud Pak for DataIBM Db2 code execution

6.5

First published (updated )

CVE-2023-27859

IBM Data Virtualization on Cloud Pak for DataIBM Db2 information disclosure

7.5

First published (updated )

CVE-2023-47152

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.