Known vulnerabilities in IBM Cloud Pak System 2.3.3.6 iFix 2

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Version: 2.3.3.6 iFix 2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 77
Public exploits: 9
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Cloud Pak System version 2.3.3.6 iFix 2 IBM Cloud Pak System 2.3.3.6 iFix 2 is affected by 77 vulnerabilities: 1 critical, 7 high, 42 medium, 27 low Critical High Medium Low

Vulnerabilities (77)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116193 - Improper input validation
CVE-2025-41250		 CWE-20 Medium
No
No
 2.3.6.1 30.09.2025 SB2025093031
SB2026021319
#VU113509 - Improper input validation
CVE-2025-41241		 CWE-20 Low
No
No
 2.3.6.1 30.07.2025 SB2025073050
SB2026021319
#VU113110 - Allocation of Resources Without Limits or Throttling
CVE-2025-1000		 CWE-770 Medium
No
No
 - 22.07.2025 SB2025072218
SB2025072221
SB2025072348
and 3 more
#VU113009 - Missing release of memory after effective lifetime
CVE-2025-41239		 CWE-401 Medium
No
No
 2.3.6.1 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 3 more
#VU113008 - Heap-based Buffer Overflow
CVE-2025-41238		 CWE-122 Medium
No
No
 2.3.6.1 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU113007 - Integer underflow
CVE-2025-41237		 CWE-191 Medium
No
No
 2.3.6.1 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU113006 - Integer overflow
CVE-2025-41236		 CWE-190 High
No
No
 2.3.6.1 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU109487 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-41228		 CWE-79 Low
No
No
 2.3.6.1 20.05.2025 SB2025052065
SB2025052066
SB2025100354
#VU109486 - Resource exhaustion
CVE-2025-41227		 CWE-400 Medium
No
No
 2.3.6.1 20.05.2025 SB2025052065
SB2025052067
SB2025052068
and 1 more
#VU109485 - Improper input validation
CVE-2025-41226		 CWE-20 Medium
No
No
 2.3.6.1 20.05.2025 SB2025052065
SB2025100354
#VU103290 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-12801		 CWE-611 Medium
No
No
 2.3.6.0 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 23 more
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798		 CWE-94 Low
No
No
 2.3.6.0 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more
#VU101344 - Integer overflow
CVE-2024-10917		 CWE-190 Low
No
No
 2.3.6.0 09.12.2024 SB2024120927
SB2024120928
SB2024120929
and 66 more
#VU98644 - Improper input validation
CVE-2024-21235		 CWE-20 Medium
No
No
 2.3.6.0 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98645 - Improper input validation
CVE-2024-21210		 CWE-20 Low
No
No
 2.3.6.0 15.10.2024 SB20241015215
SB2024101668
SB2024101672
and 122 more
#VU98647 - Improper input validation
CVE-2024-21208		 CWE-20 Low
No
No
 2.3.6.0 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98648 - Improper input validation
CVE-2024-21217		 CWE-20 Low
No
No
 2.3.6.0 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU94504 - Exposure of sensitive information to an unauthorized actor
CVE-2024-40725		 CWE-200 Medium
Public exploit available
No
 2.3.4.1 iFix 1 17.07.2024 SB20240717136
SB2024071854
SB2024071896
and 22 more
#VU93729 - Exposure of sensitive information to an unauthorized actor
CVE-2024-39884		 CWE-200 Medium
No
No
 2.3.4.1 iFix 1 03.07.2024 SB2024070342
SB2024070401
SB2024070890
and 21 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 2.3.6.0 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more


Showing elements 1 - 20 out of 77