Known vulnerabilities in IBM Cloud Pak for Security 1.10.1.0

Vendor: IBM Corporation
Software: IBM Cloud Pak for Security
Version: 1.10.1.0
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_for_security:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 86
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Cloud Pak for Security version 1.10.1.0 IBM Cloud Pak for Security 1.10.1.0 is affected by 86 vulnerabilities: 1 critical, 12 high, 54 medium, 19 low Critical High Medium Low

Vulnerabilities (86)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124031 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-57352		 CWE-1321 Medium
No
No
 1.11.9.0 16.03.2026 SB2026031634
SB2026031635
#VU124030 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-57350		 CWE-1321 High
No
No
 1.11.9.0 16.03.2026 SB2026031633
SB2026031635
#VU117790 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-62727		 CWE-835 Medium
No
No
 1.11.9.0 29.10.2025 SB2025102946
SB2025102949
SB2025102950
and 11 more
#VU116130 - Improper input validation
CVE-2025-9288		 CWE-20 Medium
No
No
 1.11.9.0 26.09.2025 SB2025092616
SB2025092618
SB2025092620
and 17 more
#VU115762 - Improper input validation
CVE-2025-9287		 CWE-20 Medium
No
No
 1.11.9.0 18.09.2025 SB2025091827
SB2025091828
SB2025091830
and 12 more
#VU114574 - Use of Cache Containing Sensitive Information
CVE-2025-57752		 CWE-524 Medium
No
No
 1.11.9.0 30.08.2025 SB2025083005
SB2025101766
SB2025120245
and 7 more
#VU114573 - Improper input validation
CVE-2025-55173		 CWE-20 Low
No
No
 1.11.9.0 30.08.2025 SB2025083004
SB2025101766
SB2025120245
and 7 more
#VU111944 - Improper input validation
CVE-2025-6545		 CWE-20 Medium
No
No
 1.11.9.0 25.06.2025 SB2025062533
SB2025062536
SB2025062537
and 11 more
#VU111943 - Improper input validation
CVE-2025-6547		 CWE-20 Medium
No
No
 1.11.9.0 25.06.2025 SB2025062533
SB2025062536
SB2025062537
and 10 more
#VU109922 - Missing Origin Validation in WebSockets
CVE-2025-48068		 CWE-1385 Low
No
No
 1.11.9.0 29.05.2025 SB2025052970
SB2025122227
SB2026010925
and 4 more
#VU109239 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-32421		 CWE-362 Low
Public exploit available
No
 1.11.9.0 16.05.2025 SB2025051603
SB2026030306
SB2026031635
#VU105939 - Improper Authorization
CVE-2025-29927		 CWE-285 High
Public exploit available
Exploited
 1.11.9.0 21.03.2025 SB2025032132
SB2025052304
SB2025061612
and 5 more
#VU103227 - Use of Insufficiently Random Values
CVE-2025-22150		 CWE-330 Medium
No
No
 1.11.9.0 22.01.2025 SB2025012259
SB2025012439
SB2025012440
and 26 more
#VU103116 - Improper Authorization
CVE-2024-51479		 CWE-285 Medium
No
No
 1.11.9.0 21.01.2025 SB2025012133
SB2025060972
SB2026030306
and 1 more
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744		 CWE-1059 Low
No
No
 1.11.9.0 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU98500 - Resource exhaustion
CVE-2024-47831		 CWE-400 Medium
No
No
 1.11.9.0 14.10.2024 SB2024101466
SB2024112517
SB2024112818
and 2 more
#VU86835 - Deserialization of Untrusted Data
CVE-2020-7660		 CWE-502 High
No
No
 1.11.9.0 27.02.2024 SB2024022730
SB2020070752
SB2026031635
and 2 more
#VU67589 - NULL Pointer Dereference
CVE-2020-35538		 CWE-476 Medium
No
No
 1.11.3.0 22.09.2022 SB2022092235
SB2022092240
SB2022093033
and 6 more
#VU66867 - Out-of-bounds write
CVE-2021-38593		 CWE-787 Low
No
No
 1.11.3.0 30.08.2022 SB2021081244
SB2022083038
SB2022051045
and 13 more
#VU21274 - Out-of-bounds read
CVE-2019-11038		 CWE-125 Medium
No
No
 1.11.3.0 23.09.2019 SB2019092305
SB2019072508
SB2019110109
and 11 more


Showing elements 1 - 20 out of 86