Known vulnerabilities in Cloud Pak for Data

Vendor: IBM Corporation
Software: Cloud Pak for Data
Software CPE: cpe:2.3:a:ibm_corporation:cloud_pak_for_data:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 130
Public exploits: 14
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cloud Pak for Data Cloud Pak for Data is affected by 130 known vulnerabilities: 1 critical, 14 high, 86 medium, 29 low Critical High Medium Low

Vulnerabilities (130)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125750 - Server-Side Request Forgery (SSRF)
CVE-2025-62718		 CWE-918 High
No
No
 5.3.1 10.04.2026 SB2026041001
SB2026050419
SB2026050715
and 33 more
#VU125339 - Out-of-bounds read
CVE-2026-39892		 CWE-125 Low
No
No
 5.3.1 08.04.2026 SB2026040897
SB20260408162
SB20260408163
and 16 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 5.3.1 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 90 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 5.3.1 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 94 more
#VU112941 - Improper input validation
CVE-2025-30754		 CWE-20 Medium
No
No
 5.2.1 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112936 - Improper input validation
CVE-2025-50059		 CWE-20 High
No
No
 5.2.1 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 54 more
#VU112937 - Improper input validation
CVE-2025-30749		 CWE-20 High
No
No
 5.2.1 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106		 CWE-20 High
No
No
 5.2.1 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU112435 - Resource exhaustion
CVE-2025-29786		 CWE-400 Medium
No
No
 5.1.2 07.07.2025 SB2025070753
SB2025070755
SB2025121138
and 1 more
#VU112039 - Allocation of Resources Without Limits or Throttling
CVE-2025-32386		 CWE-770 Medium
No
No
 5.0.1 30.06.2025 SB2025063006
SB2025063009
SB2025063011
and 3 more
#VU111979 - Protection Mechanism Failure
CVE-2025-50181		 CWE-693 Low
No
No
 5.3.1 26.06.2025 SB2025062659
SB2025062660
SB2025062662
and 55 more
#VU111974 - Stack-based buffer overflow
CVE-2025-32387		 CWE-121 Medium
No
No
 5.0.1 26.06.2025 SB2025062648
SB2025063009
SB2025063011
and 3 more
#VU105461 - Resource exhaustion
CVE-2025-22868		 CWE-400 Medium
No
No
 5.2.0 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU105459 - Resource exhaustion
CVE-2025-22869		 CWE-400 Low
No
No
 5.2.0 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU103227 - Use of Insufficiently Random Values
CVE-2025-22150		 CWE-330 Medium
No
No
 5.1.2 22.01.2025 SB2025012259
SB2025012439
SB2025012440
and 29 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538		 CWE-185 Medium
No
No
 5.2 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU99563 - Improper Verification of Cryptographic Signature
CVE-2024-48948		 CWE-347 Low
No
No
 5.2 31.10.2024 SB2024103162
SB2024103166
SB2024110115
and 18 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590		 CWE-405 Medium
Available
No
 5.2 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU92245 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-33883		 CWE-1321 High
Available
No
 5.2 19.06.2024 SB2024061916
SB2024062871
SB2024072414
and 11 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 5.2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 654 more


Showing elements 1 - 20 out of 130