Known vulnerabilities in Cloud Pak for Security (CP4S) 1.10.14.0

Vendor: IBM Corporation
Software: Cloud Pak for Security (CP4S)
Version: 1.10.14.0
Software CPE: cpe:2.3:a:ibm_corporation:cloud_pak_for_security:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 29
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cloud Pak for Security (CP4S) version 1.10.14.0 Cloud Pak for Security (CP4S) 1.10.14.0 is affected by 29 vulnerabilities: 2 high, 25 medium, 2 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89107 - Improper input validation
CVE-2023-47727		 CWE-20 Low
No
No
 - 02.05.2024 SB2024050221
#VU80757 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-23064		 CWE-79 Medium
No
No
 1.10.15.0 13.09.2023 SB2023091344
SB2023100512
SB2024010320
and 11 more
#VU80756 - Improper input validation
CVE-2022-38778		 CWE-20 Medium
No
No
 1.10.15.0 13.09.2023 SB2023091344
#VU77622 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34981		 CWE-200 Medium
No
No
 1.10.15.0 22.06.2023 SB2023062241
SB2023070714
SB2023071901
and 24 more
#VU76617 - Server-Side Request Forgery (SSRF)
CVE-2023-28155		 CWE-918 Medium
No
No
 1.10.15.0 30.05.2023 SB2023053012
SB2023053141
SB2023062120
and 17 more
#VU73969 - Incorrect Regular Expression
CVE-2022-25927		 CWE-185 Medium
No
No
 1.10.15.0 23.03.2023 SB2023032313
SB2023032315
SB2023032710
and 19 more
#VU71577 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-46175		 CWE-94 Medium
No
No
 1.10.15.0 26.01.2023 SB2023012644
SB2023012645
SB2023013117
and 44 more
#VU70123 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-37601		 CWE-94 High
No
No
 1.10.15.0 12.12.2022 SB2022121220
SB2023010419
SB2023011403
and 20 more
#VU70122 - Incorrect Regular Expression
CVE-2022-37599		 CWE-185 Medium
No
No
 1.10.15.0 12.12.2022 SB2022121221
SB2023010424
SB2023020920
and 19 more
#VU70121 - Incorrect Regular Expression
CVE-2022-37603		 CWE-185 Medium
No
No
 1.10.15.0 12.12.2022 SB2022121221
SB2022121222
SB2023010418
and 29 more
#VU69942 - Incorrect Regular Expression
CVE-2022-3517		 CWE-185 Medium
No
No
 1.10.15.0 06.12.2022 SB2022120638
SB2022120639
SB2022120640
and 48 more
#VU66955 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7788		 CWE-94 Medium
No
No
 1.10.15.0 05.09.2022 SB2020121120
SB2022090501
SB2022091209
and 21 more
#VU66400 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-33987		 CWE-601 Medium
No
No
 1.10.15.0 11.08.2022 SB2022081124
SB2022081525
SB2022090835
and 22 more
#VU64030 - Resource exhaustion
CVE-2021-44906		 CWE-400 High
No
No
 1.10.15.0 07.06.2022 SB2022060836
SB2022062103
SB2022062203
and 52 more
#VU63702 - Allocation of Resources Without Limits or Throttling
CVE-2020-15168		 CWE-770 Medium
No
No
 1.10.15.0 26.05.2022 SB2020091032
SB2022052615
SB2022060618
and 12 more
#VU62361 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43138		 CWE-94 Medium
No
No
 1.10.15.0 15.04.2022 SB2022041532
SB2022041533
SB2022062103
and 33 more
#VU61471 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0235		 CWE-200 Low
No
No
 1.10.15.0 20.03.2022 SB2022032001
SB2022032002
SB2022032009
and 35 more
#VU57967 - Improper input validation
CVE-2021-3807		 CWE-20 Medium
No
No
 1.10.15.0 05.11.2021 SB2021110513
SB2021112603
SB2022042257
and 51 more
#VU55498 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-15366		 CWE-94 Medium
No
No
 1.10.15.0 02.08.2021 SB2020071552
SB2021080213
SB2020120120
and 14 more
#VU26151 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7598		 CWE-94 Medium
No
No
 1.10.15.0 18.03.2020 SB2020031805
SB2020072216
SB2020061308
and 18 more


Showing elements 1 - 20 out of 29