Known vulnerabilities in Cloud Pak for Data

Vendor: IBM Corporation
Software: Cloud Pak for Data
Software CPE: cpe:2.3:a:ibm_corporation:cloud_pak_for_data:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 125
Public exploits: 14
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cloud Pak for Data Cloud Pak for Data is affected by 125 known vulnerabilities: 1 critical, 13 high, 84 medium, 27 low Critical High Medium Low

Vulnerabilities (125)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112941 - Improper input validation
CVE-2025-30754		 CWE-20 Medium
No
No
 5.2.1 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112936 - Improper input validation
CVE-2025-50059		 CWE-20 High
No
No
 5.2.1 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 54 more
#VU112937 - Improper input validation
CVE-2025-30749		 CWE-20 High
No
No
 5.2.1 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106		 CWE-20 High
No
No
 5.2.1 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU112435 - Resource exhaustion
CVE-2025-29786		 CWE-400 Medium
No
No
 5.1.2 07.07.2025 SB2025070753
SB2025070755
SB2025121138
and 1 more
#VU112039 - Allocation of Resources Without Limits or Throttling
CVE-2025-32386		 CWE-770 Medium
No
No
 5.0.1 30.06.2025 SB2025063006
SB2025063009
SB2025063011
and 3 more
#VU111974 - Stack-based buffer overflow
CVE-2025-32387		 CWE-121 Medium
No
No
 5.0.1 26.06.2025 SB2025062648
SB2025063009
SB2025063011
and 3 more
#VU105461 - Resource exhaustion
CVE-2025-22868		 CWE-400 Medium
No
No
 5.2.0 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU105459 - Resource exhaustion
CVE-2025-22869		 CWE-400 Low
No
No
 5.2.0 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU105452 - Server-Side Request Forgery (SSRF)
CVE-2025-27152		 CWE-918 Medium
Available
No
 5.2 07.03.2025 SB2025030777
SB2025031918
SB2025032417
and 42 more
#VU103227 - Use of Insufficiently Random Values
CVE-2025-22150		 CWE-330 Medium
No
No
 5.1.2 22.01.2025 SB2025012259
SB2025012439
SB2025012440
and 27 more
#VU101383 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-36621		 CWE-362 Low
No
No
 5.2 10.12.2024 SB2024121030
SB2024121039
SB2024121040
and 9 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538		 CWE-185 Medium
No
No
 5.2 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU99563 - Improper Verification of Cryptographic Signature
CVE-2024-48948		 CWE-347 Low
No
No
 5.2 31.10.2024 SB2024103162
SB2024103166
SB2024110115
and 18 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799		 CWE-79 Low
No
No
 5.2 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 5.2 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590		 CWE-405 Medium
Available
No
 5.2 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU96712 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-45310		 CWE-362 Low
No
No
 5.2 03.09.2024 SB2024090315
SB2024091283
SB2024091416
and 18 more
#VU92245 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-33883		 CWE-1321 High
Available
No
 5.2 19.06.2024 SB2024061916
SB2024062871
SB2024072414
and 11 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 5.2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more


Showing elements 1 - 20 out of 125