Known vulnerabilities in IBM Cloud Pak System

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 670
Public exploits: 49
Known exploited (KEV): 17
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 670 known vulnerabilities: 8 critical, 83 high, 399 medium, 180 low Critical High Medium Low

Vulnerabilities (670)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137316 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-11806		 CWE-444 Medium
No
No
 - 10.07.2026 SB2026071039
SB2026071040
SB2026071045
and 6 more
#VU134270 - Use After Free
CVE-2026-45447		 CWE-416 High
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 49 more
#VU134271 - Improper input validation
CVE-2026-34182		 CWE-20 High
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 26 more
#VU134272 - Allocation of Resources Without Limits or Throttling
CVE-2026-34183		 CWE-770 Medium
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 15 more
#VU134274 - NULL Pointer Dereference
CVE-2026-42764		 CWE-476 Medium
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 15 more
#VU134275 - Improper Initialization
CVE-2026-45445		 CWE-665 Low
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 24 more
#VU134276 - Heap-based Buffer Overflow
CVE-2026-7383		 CWE-122 Low
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 36 more
#VU134277 - Out-of-bounds read
CVE-2026-9076		 CWE-125 Medium
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 37 more
#VU134278 - Out-of-bounds read
CVE-2026-34180		 CWE-125 Medium
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 37 more
#VU134279 - Improper input validation
CVE-2026-34181		 CWE-20 Medium
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 15 more
#VU134281 - NULL Pointer Dereference
CVE-2026-42766		 CWE-476 Medium
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 38 more
#VU134282 - NULL Pointer Dereference
CVE-2026-42767		 CWE-476 Medium
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 25 more
#VU134283 - Observable discrepancy
CVE-2026-42768		 CWE-203 Medium
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 19 more
#VU134284 - Improper Certificate Validation
CVE-2026-42769		 CWE-295 Low
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 14 more
#VU134285 - Improper input validation
CVE-2026-42770		 CWE-20 Medium
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 22 more
#VU134287 - Improper Verification of Cryptographic Signature
CVE-2026-45446		 CWE-347 Medium
No
No
 2.3.6.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 20 more
#VU132949 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-44495		 CWE-1321 Medium
No
No
 2.3.5.1 29.05.2026 SB20260424169
SB2026061999
SB20260619101
and 15 more
#VU127864 - Improper control of a resource through its lifetime
CVE-2026-31431		 CWE-664 High
Available
Exploited
 2.3.6.2 25.04.2026 SB20260425182
SB2026043080
SB2026050204
and 130 more
#VU115828 - Resource exhaustion
CVE-2025-6493		 CWE-400 Medium
No
No
 2.3.5.1 18.09.2025 SB20250918111
SB20250918112
SB2025112530
and 9 more
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795		 CWE-113 Medium
No
No
 2.3.6.2 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 39 more


Showing elements 1 - 20 out of 670