Known vulnerabilities in IBM Cloud Pak System 2.3.3.7 iFix 01

Vendor: IBM Corporation

Software: IBM Cloud Pak System

Version: 2.3.3.7 iFix 01

Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 7

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU93545 - Server-Side Request Forgery (SSRF) CVE-2024-39573	CWE-918	Medium	No	No	2.3.6.0	01.07.2024	SB2024070155 SB20240702144 SB2024070402 and 46 more
#VU93543 - Server-Side Request Forgery (SSRF) CVE-2024-38476	CWE-918	High	No	No	2.3.6.0	01.07.2024	SB2024070155 SB20240702144 SB2024070402 and 61 more
#VU93540 - Improper input validation CVE-2024-38473	CWE-20	Medium	Public exploit available	No	2.3.6.0	01.07.2024	SB2024070155 SB20240702144 SB2024070402 and 47 more
#VU89292 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-26026	CWE-89	High	Public exploit available	No	2.3.4.1, 2.3.5.0	09.05.2024	SB2024050926 SB2025030416
#VU88977 - Resource exhaustion CVE-2024-25026	CWE-400	Medium	No	No	2.3.4.1, 2.3.5.0	24.04.2024	SB2024042458 SB2024042525 SB2024042626 and 68 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-38709	CWE-113	Medium	No	No	2.3.6.0	04.04.2024	SB2024040458 SB2024040502 SB2024040903 and 62 more
#VU88136 - Resource exhaustion CVE-2024-27268	CWE-400	Medium	No	No	2.3.4.1, 2.3.5.0	04.04.2024	SB2024040437 SB2024050803 SB2024052003 and 40 more