Known vulnerabilities in IBM Cloud Pak System 2.3.3.3 iFix 1

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Version: 2.3.3.3 iFix 1
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 106
Public exploits: 13
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Cloud Pak System version 2.3.3.3 iFix 1 IBM Cloud Pak System 2.3.3.3 iFix 1 is affected by 106 vulnerabilities: 4 critical, 20 high, 53 medium, 29 low Critical High Medium Low

Vulnerabilities (106)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105280 - Out-of-bounds read
CVE-2025-22226		 CWE-125 High
No
Exploited
 2.3.6.0 04.03.2025 SB2025030423
SB2025030425
SB2025030426
and 3 more
#VU105279 - Permissions, Privileges, and Access Controls
CVE-2025-22225		 CWE-264 High
No
Exploited
 2.3.6.0 04.03.2025 SB2025030423
SB2025051952
SB2025052027
and 1 more
#VU105278 - Heap-based Buffer Overflow
CVE-2025-22224		 CWE-122 High
No
Exploited
 2.3.6.0 04.03.2025 SB2025030423
SB2025030425
SB2025051952
and 2 more
#VU97226 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-27267		 CWE-362 Medium
No
No
 2.3.4.1 iFix 1 12.09.2024 SB2024091291
SB2024091292
SB2024091618
and 57 more
#VU95625 - Improper input validation
CVE-2024-35154		 CWE-20 Low
No
No
 2.3.4.1 iFix 1 09.08.2024 SB2024080941
SB2024081324
SB2024081439
and 11 more
#VU94637 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-37532		 CWE-451 Medium
No
No
 2.3.4.1 iFix 1 22.07.2024 SB2024072221
SB2024072222
SB2024072306
and 14 more
#VU94558 - Improper input validation
CVE-2024-21144		 CWE-20 Low
No
No
 2.3.4.1 iFix 1 18.07.2024 SB20240718154
SB20240718155
SB20240718192
and 114 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 2.3.4.1 iFix 1 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU89711 - NULL Pointer Dereference
CVE-2024-33600		 CWE-476 Medium
No
No
 2.3.5.0 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 83 more
#VU89710 - Allocation of Resources Without Limits or Throttling
CVE-2024-33601		 CWE-770 Low
No
No
 2.3.5.0 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 82 more
#VU89292 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-26026		 CWE-89 High
Public exploit available
No
 2.3.4.1, 2.3.5.0 09.05.2024 SB2024050926
SB2025030416
#VU88977 - Resource exhaustion
CVE-2024-25026		 CWE-400 Medium
No
No
 2.3.4.1, 2.3.5.0 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU86309 - Observable discrepancy
CVE-2023-45287		 CWE-203 Medium
No
No
 2.3.3.6 iFix 1 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU83545 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-46337		 CWE-90 High
No
No
 2.3.3.6 iFix 2, 2.3.3.7 iFix 01 28.11.2023 SB2023112861
SB2024011806
SB2024020107
and 34 more
#VU75496 - Improper input validation
CVE-2023-26021		 CWE-20 Medium
No
No
 2.3.3.6 iFix 1 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 8 more
#VU75495 - Resource Management Errors
CVE-2023-27555		 CWE-399 Low
No
No
 2.3.3.6 iFix 1 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 7 more
#VU75494 - Improper input validation
CVE-2023-29255		 CWE-20 Medium
No
No
 2.3.3.6 iFix 1 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 7 more
#VU75493 - Permissions, Privileges, and Access Controls
CVE-2023-29257		 CWE-264 Low
No
No
 2.3.3.6 iFix 1 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 8 more
#VU72321 - Improper Privilege Management
CVE-2022-36109		 CWE-269 Low
No
No
 2.3.3.6 16.02.2023 SB2023021619
SB2023021620
SB2023031742
and 14 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Public exploit available
No
 2.3.3.6 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more


Showing elements 1 - 20 out of 106