Multiple vulnerabilities in IBM Cloud Pak System

1) Improper Check for Unusual or Exceptional Conditions

EUVDB-ID: #VU108924

Risk: Medium

CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2025-32997

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

Exploit availability: No

Description

The vulnerability allows a remote attacker to modify data on the system.

The vulnerability exists due to improper error handling. A remote attacker can send specially crafted data to the application and modify data on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM Cloud Pak System: 2.3.3.5 - 2.3.5.0

CPE2.3

• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:iFix 1:*:*:*:*:*:*

External links

https://www.ibm.com/support/pages/node/7237418

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Improper authorization

EUVDB-ID: #VU101777

Risk: Medium

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2024-45337

CWE-ID: CWE-285 - Improper Authorization

Exploit availability: Yes

Description

The vulnerability allows a remote attacker to gain unauthorized access to the application.

The vulnerability exists due to improper authorization caused by improper usage of the ServerConfig.PublicKeyCallback callback. A remote attacker can bypass authorization in certain cases and gain access to the application.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM Cloud Pak System: 2.3.3.5 - 2.3.5.0

CPE2.3

• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:iFix 1:*:*:*:*:*:*

External links

https://www.ibm.com/support/pages/node/7237418

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

3) Inefficient regular expression complexity

EUVDB-ID: #VU101895

Risk: Low

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-52798

CWE-ID: CWE-1333 - Inefficient Regular Expression Complexity

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient input validation when processing untrusted input with a regular expressions. A remote attacker can pass specially crafted data to the application and perform regular expression denial of service (ReDos) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM Cloud Pak System: 2.3.3.5 - 2.3.5.0

CPE2.3

• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:iFix 1:*:*:*:*:*:*

External links

https://www.ibm.com/support/pages/node/7237418

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Resource exhaustion

EUVDB-ID: #VU105459

Risk: Low

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-22869

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources within the ssh package when handling clients that complete the key exchange slowly, or not at all. A remote user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM Cloud Pak System: 2.3.3.5 - 2.3.5.0

CPE2.3

• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:iFix 1:*:*:*:*:*:*

External links

https://www.ibm.com/support/pages/node/7237418

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Inefficient regular expression complexity

EUVDB-ID: #VU98132

Risk: Low

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-45296

CWE-ID: CWE-1333 - Inefficient Regular Expression Complexity

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient input validation when processing untrusted input with a regular expressions. A remote attacker can pass specially crafted data to the application and perform regular expression denial of service (ReDos) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM Cloud Pak System: 2.3.3.5 - 2.3.5.0

CPE2.3

• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:iFix 1:*:*:*:*:*:*

External links

https://www.ibm.com/support/pages/node/7237418

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Always-Incorrect Control Flow Implementation

EUVDB-ID: #VU108925

Risk: Medium

CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2025-32996

CWE-ID: CWE-670 - Always-Incorrect Control Flow Implementation

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to writeBody can be called twice because "else if" is not used. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM Cloud Pak System: 2.3.3.5 - 2.3.5.0

CPE2.3

• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:iFix 1:*:*:*:*:*:*

External links

https://www.ibm.com/support/pages/node/7237418

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Server-Side Request Forgery (SSRF)

EUVDB-ID: #VU105452

Risk: Medium

CVSSv4.0: 5.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N/E:P/U:Green]

CVE-ID: CVE-2025-27152

CWE-ID: CWE-918 - Server-Side Request Forgery (SSRF)

Exploit availability: Yes

Description

The disclosed vulnerability allows a remote attacker to perform SSRF attacks.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems.

Successful exploitation of this vulnerability may allow a remote attacker gain access to sensitive data, located in the local network or send malicious requests to other servers from the vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM Cloud Pak System: 2.3.3.5 - 2.3.5.0

CPE2.3

• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:iFix 1:*:*:*:*:*:*

External links

https://www.ibm.com/support/pages/node/7237418

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

8) Use of a broken or risky cryptographic algorithm

EUVDB-ID: #VU110091

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-55885

CWE-ID: CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Exploit availability: No

Description

The vulnerability allows a remote attacker to modify data on the system.

The vulnerability exists due to beego use MD5 as a hashing algorithm and MD5 is no longer considered secure against well-funded opponents due to its vulnerability to collision attacks. A remote attacker can gain unauthorized access to modify data on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM Cloud Pak System: 2.3.3.5 - 2.3.5.0

CPE2.3

• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:iFix 1:*:*:*:*:*:*

External links

https://www.ibm.com/support/pages/node/7237418

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Cross-site scripting

EUVDB-ID: #VU105862

Risk: Medium

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-57965

CWE-ID: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Exploit availability: No

Description

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability exists due to lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted setAttribute('href',href) call. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM Cloud Pak System: 2.3.3.5 - 2.3.5.0

CPE2.3

• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:iFix 1:*:*:*:*:*:*

External links

https://www.ibm.com/support/pages/node/7237418

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Improper error handling

EUVDB-ID: #VU101027

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-21536

CWE-ID: CWE-388 - Error Handling

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an UnhandledPromiseRejection error thrown by micromatch. A remote non-authenticated attacker can send specially crafted request to the application and crash the Node.js process.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM Cloud Pak System: 2.3.3.5 - 2.3.5.0

CPE2.3

• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:iFix 1:*:*:*:*:*:*

External links

https://www.ibm.com/support/pages/node/7237418

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Cross-site scripting

EUVDB-ID: #VU106348

Risk: Low

CVSSv4.0: 2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P/U:Clear]

CVE-ID: CVE-2025-30223

CWE-ID: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Exploit availability: Yes

Description

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability exists due to insufficient sanitization of user-supplied data in the "RenderForm()" function. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM Cloud Pak System: 2.3.3.5 - 2.3.5.0

CPE2.3

• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:iFix 1:*:*:*:*:*:*

External links

https://www.ibm.com/support/pages/node/7237418

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

12) Asymmetric Resource Consumption (Amplification)

EUVDB-ID: #VU97208

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-45590

CWE-ID: CWE-405 - Asymmetric Resource Consumption (Amplification)

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper handling of a large number of requests when url encoding is enabled. A remote attacker can send multiple requests to the server and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM Cloud Pak System: 2.3.3.5 - 2.3.5.0

CPE2.3

• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:iFix 1:*:*:*:*:*:*

External links

https://www.ibm.com/support/pages/node/7237418

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Incorrect Regular Expression

EUVDB-ID: #VU100921

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-21538

CWE-ID: CWE-185 - Incorrect Regular Expression

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient input validation when processing regular expressions. A remote attacker can pass specially crafted data to the application and perform regular expression denial of service (ReDos) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM Cloud Pak System: 2.3.3.5 - 2.3.5.0

CPE2.3

• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.6:iFix 1:*:*:*:*:*:*

External links

https://www.ibm.com/support/pages/node/7237418

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.