IBM DevOps Code ClearCase 11.0

productDE

cpe:/a:ibm:devops_code_clearcase:11.0

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

8critical10high1medium1low

updated 2026-10-25

vulnerabilities (42)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-53020US	—	4.96% (92nd)	Exploit	no fix	2025-07-10	—
CVE-2025-23048US	—	1.04% (64th)	Exploit	no fix	2025-07-10	—
CVE-2025-49812US	—	0.61% (49th)	Exploit	no fix	2025-07-10	—
CVE-2025-36038US	critical9.8	13.3% (96th)	—	no fix	2025-06-25	—
CVE-2024-9143US	—	5.84% (93rd)	—	no fix	2024-10-16	—
CVE-2025-49630US	—	1.35% (71st)	—	no fix	2025-07-10	—
CVE-2024-43394US	—	1.27% (70th)	—	no fix	2025-07-10	—
CVE-2026-14512US	—	0.97% (62nd)	—	no fix	2026-07-28	—
CVE-2024-43204US	—	0.91% (60th)	—	no fix	2025-07-10	—
CVE-2025-54090US	—	0.82% (57th)	—	no fix	2025-07-23	—
CVE-2024-42516US	—	0.82% (57th)	—	no fix	2025-07-10	—
CVE-2024-47252US	—	0.80% (56th)	—	no fix	2025-07-10	—
CVE-2026-9072US	critical9.8	0.72% (53rd)	—	no fix	2026-06-22	—
CVE-2026-14974US	critical9.8	0.68% (52nd)	—	no fix	2026-07-28	—
CVE-2026-9071US	—	0.62% (49th)	—	no fix	2026-06-22	—
CVE-2026-14976US	critical9.8OT elevated	0.61% (49th)	—	no fix	2026-07-28	—
CVE-2026-8646US	critical9.1	0.59% (47th)	—	no fix	2026-06-22	—
CVE-2026-9320US	high7.5	0.56% (46th)	—	no fix	2026-06-22	—
CVE-2026-9322US	—	0.56% (46th)	—	no fix	2026-07-30	—
CVE-2026-9171US	—	0.55% (45th)	—	no fix	2026-07-17	—
CVE-2026-14529US	critical9.8OT elevated	0.53% (44th)	—	no fix	2026-07-29	—
CVE-2026-14446US	—OT elevated	0.53% (44th)	—	no fix	2026-07-28	—
CVE-2026-15280US	—	0.50% (42nd)	—	no fix	2026-07-28	—
CVE-2025-36097US	—	0.49% (41st)	—	no fix	2025-07-16	—
CVE-2026-16184US	critical9.8OT elevated	0.47% (40th)	—	no fix	2026-07-28	—
CVE-2026-10852US	high7.5	0.47% (40th)	—	no fix	2026-06-22	—
CVE-2026-10845US	—	0.47% (39th)	—	no fix	2026-06-22	—
CVE-2026-14981US	—	0.46% (39th)	—	no fix	2026-07-28	—
CVE-2026-14528US	high7.5	0.45% (38th)	—	no fix	2026-07-28	—
CVE-2026-14980US	high8.8	0.43% (36th)	—	no fix	2026-07-30	—
CVE-2024-56339US	high7.5	0.42% (35th)	—	no fix	2025-08-07	—
CVE-2026-8858US	high8.8	0.41% (34th)	—	no fix	2026-06-22	—
CVE-2026-15328US	high8.1	0.39% (32nd)	—	no fix	2026-07-28	—
CVE-2026-9006US	critical9.1	0.39% (31st)	—	no fix	2026-06-22	—
CVE-2026-16192US	medium6.5	0.37% (30th)	—	no fix	2026-07-28	—
CVE-2025-27907US	low2.7	0.35% (28th)	—	no fix	2025-04-22	—
CVE-2026-15325US	—	0.34% (26th)	—	no fix	2026-07-28	—
CVE-2026-15064US	—	0.34% (26th)	—	no fix	2026-07-28	—
CVE-2026-14515US	—	0.30% (22nd)	—	no fix	2026-07-28	—
CVE-2025-33142US	high7.5	0.27% (18th)	—	no fix	2025-08-14	—
CVE-2025-33104US	high7.6	0.25% (15th)	—	no fix	2025-05-14	—
CVE-2026-2482US	high8.8	0.15% (4th)	—	no fix	2026-07-29	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')4 CVEs
CWE-918Server-Side Request Forgery (SSRF)4 CVEs
CWE-306Missing Authentication for Critical Function3 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs
CWE-287Improper Authentication2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)42 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan