Known vulnerabilities in IBM Cloud Pak System

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137316 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-11806		 CWE-444 Medium
No
No
 - 10.07.2026 SB2026071039
SB2026071040
SB2026071045
and 5 more
#VU132949 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-44495		 CWE-1321 Medium
No
No
 2.3.5.1 29.05.2026 SB20260424169
SB2026061999
SB20260619101
and 10 more
#VU127582 - Allocation of Resources Without Limits or Throttling
CVE-2026-22036		 CWE-770 Medium
No
No
 2.3.5.1 24.04.2026 SB20260424138
SB20260424156
SB20260424157
and 6 more
#VU127581 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-1525		 CWE-444 Medium
No
No
 2.3.5.1 24.04.2026 SB20260424137
SB20260424148
SB20260424149
and 12 more
#VU127579 - Improper Validation of Specified Quantity in Input
CVE-2026-1528		 CWE-1284 Medium
No
No
 2.3.5.1 24.04.2026 SB20260424137
SB20260424148
SB20260424149
and 13 more
#VU127578 - Improper Validation of Specified Quantity in Input
CVE-2026-2229		 CWE-1284 Medium
No
No
 2.3.5.1 24.04.2026 SB20260424137
SB20260424148
SB20260424149
and 12 more
#VU127577 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-1527		 CWE-93 Low
No
No
 2.3.5.1 24.04.2026 SB20260424137
SB20260424148
SB20260424153
and 7 more
#VU127576 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-1526		 CWE-409 Medium
No
No
 2.3.5.1 24.04.2026 SB20260424137
SB20260424148
SB20260424149
and 12 more
#VU124875 - Use of Hard-coded Cryptographic Key
CVE-2025-14923		 CWE-321 Low
No
No
 2.3.5.1 06.04.2026 SB2026040626
SB2026040627
SB2026041006
and 17 more
#VU123981 - Resource exhaustion
CVE-2025-58181		 CWE-400 Medium
No
No
 2.3.5.1 13.03.2026 SB2025122903
SB2026031315
SB2026031321
and 20 more
#VU120612 - Out-of-bounds read
CVE-2025-47914		 CWE-125 Medium
No
No
 2.3.5.1 29.12.2025 SB2025122903
SB2025122904
SB2025123103
and 18 more
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 2.3.5.1 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 53 more
#VU116142 - Uncontrolled Recursion
CVE-2025-53864		 CWE-674 Medium
No
No
 2.3.5.1 26.09.2025 SB2025092630
SB2025092631
SB2025100301
and 27 more
#VU115828 - Resource exhaustion
CVE-2025-6493		 CWE-400 Medium
No
No
 2.3.5.1 18.09.2025 SB20250918111
SB20250918112
SB2025112530
and 9 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 2.3.5.1 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 2.3.5.1 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU108837 - Improper Resource Shutdown or Release
CVE-2024-13009		 CWE-404 Medium
No
No
 2.3.5.1 09.05.2025 SB2025050925
SB2025052987
SB2025060616
and 22 more
#VU97687 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6484		 CWE-79 Medium
No
No
 2.3.5.1 25.09.2024 SB2024092512
SB20241230139
SB2025060920
and 3 more
#VU86917 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2021-4264		 CWE-1321 Medium
No
No
 2.3.5.1 29.02.2024 SB2024022927
SB2026062620
#VU60621 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23445		 CWE-79 Low
No
No
 2.3.5.1 15.02.2022 SB2021092717
SB2022021511
SB2022080802
and 11 more


Showing elements 1 - 20 out of 653