Known vulnerabilities in IBM Cloud Pak for Multicloud Management

Vendor: IBM Corporation
Software: IBM Cloud Pak for Multicloud Management
Software CPE: cpe:2.3:a:ibm_corporation:cp-management:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 345
Public exploits: 20
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak for Multicloud Management IBM Cloud Pak for Multicloud Management is affected by 345 known vulnerabilities: 8 critical, 97 high, 161 medium, 79 low Critical High Medium Low

Vulnerabilities (345)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118669 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-9910		 CWE-79 Low
No
No
 2.3 Fix Pack 12 21.11.2025 SB2025112114
SB2025112115
SB2025112459
and 1 more
#VU116897 - Resource exhaustion
CVE-2025-61919		 CWE-400 Medium
No
No
 2.3 Fix Pack 12 10.10.2025 SB2025101026
SB2025110346
SB2025110402
and 17 more
#VU116895 - Exposure of sensitive information to an unauthorized actor
CVE-2025-61780		 CWE-200 Medium
No
No
 2.3 Fix Pack 12 10.10.2025 SB2025101026
SB2025110402
SB2025110465
and 6 more
#VU116667 - Resource exhaustion
CVE-2025-61770		 CWE-400 Medium
No
No
 2.3 Fix Pack 12 07.10.2025 SB2025100725
SB2025100907
SB2025110346
and 17 more
#VU116666 - Resource exhaustion
CVE-2025-61771		 CWE-400 Medium
No
No
 2.3 Fix Pack 12 07.10.2025 SB2025100725
SB2025100907
SB2025110346
and 15 more
#VU116665 - Resource exhaustion
CVE-2025-61772		 CWE-400 Medium
No
No
 2.3 Fix Pack 12 07.10.2025 SB2025100725
SB2025100907
SB2025110346
and 16 more
#VU116214 - Covert Timing Channel
CVE-2025-9231		 CWE-385 Low
No
No
 2.3 Fix Pack 12 01.10.2025 SB2025100119
SB2025100139
SB2025100153
and 10 more
#VU116144 - Resource exhaustion
CVE-2025-59830		 CWE-400 High
No
No
 2.3 Fix Pack 12 26.09.2025 SB2025092633
SB2025093022
SB2025110346
and 14 more
#VU115794 - Resource exhaustion
CVE-2025-58767		 CWE-400 Low
No
No
 2.3 Fix Pack 12 18.09.2025 SB2025091868
SB2025102434
SB2025110338
and 12 more
#VU115164 - Improper Authentication
CVE-2025-58060		 CWE-287 High
No
No
 2.3 Fix Pack 12 11.09.2025 SB2025091139
SB2025091141
SB2025091147
and 28 more
#VU114436 - Heap-based Buffer Overflow
CVE-2025-7345		 CWE-122 High
No
No
 2.3 Fix Pack 12 26.08.2025 SB2025082629
SB2025082631
SB2025082632
and 23 more
#VU112936 - Improper input validation
CVE-2025-50059		 CWE-20 High
No
No
 2.3 Fix Pack 12 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 54 more
#VU112938 - Improper input validation
CVE-2025-50106		 CWE-20 High
No
No
 2.3 Fix Pack 12 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU112907 - Improper input validation
CVE-2025-6558		 CWE-20 Critical
Available
Exploited
 2.3 Fix Pack 12 15.07.2025 SB2025071542
SB2025071717
SB2025071780
and 38 more
#VU111971 - Improper Authorization
CVE-2025-4563		 CWE-285 Low
No
No
 2.3 Fix Pack 12 26.06.2025 SB2025062632
SB2025062645
SB2025062646
and 7 more
#VU111912 - Heap-based Buffer Overflow
CVE-2025-48060		 CWE-122 Medium
No
No
 2.3 Fix Pack 12 25.06.2025 SB2025032035
SB2025070824
SB2025070826
and 38 more
#VU110191 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-5399		 CWE-835 Low
No
No
 2.3 Fix Pack 12 04.06.2025 SB2025060430
SB2025060503
SB2025061212
and 10 more
#VU109929 - Buffer over-read
CVE-2025-32052		 CWE-126 Medium
No
No
 2.3 Fix Pack 12 29.05.2025 SB2024111329
SB2025052980
SB2025052994
and 32 more
#VU109885 - Improper Certificate Validation
CVE-2025-5025		 CWE-295 Medium
No
No
 2.3 Fix Pack 12 28.05.2025 SB2025052805
SB2025060505
SB2025072409
and 4 more
#VU107155 - Use After Free
CVE-2025-31498		 CWE-416 High
No
No
 2.3 Fix Pack 12 08.04.2025 SB2025040846
SB2025040925
SB2025040926
and 18 more


Showing elements 1 - 20 out of 345