Known vulnerabilities in IBM Cloud Pak System 2.3.4.1 iFix 1

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Version: 2.3.4.1 iFix 1
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 71
Public exploits: 7
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Cloud Pak System version 2.3.4.1 iFix 1 IBM Cloud Pak System 2.3.4.1 iFix 1 is affected by 71 vulnerabilities: 1 critical, 6 high, 43 medium, 21 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116193 - Improper input validation
CVE-2025-41250		 CWE-20 Medium
No
No
 2.3.6.1 30.09.2025 SB2025093031
SB2026021319
#VU114127 - Uncontrolled Recursion
CVE-2025-33143		 CWE-674 Medium
No
No
 2.3.6.1 18.08.2025 SB2025081812
SB2025081836
SB2025090308
and 5 more
#VU114126 - Stack-based buffer overflow
CVE-2024-52894		 CWE-121 Low
No
No
 2.3.6.1 18.08.2025 SB2025081807
SB2025081836
SB2025090308
and 5 more
#VU114125 - Missing Release of Resource after Effective Lifetime
CVE-2025-36071		 CWE-772 Medium
No
No
 2.3.6.1 18.08.2025 SB2025081805
SB2025081836
SB2025090308
and 4 more
#VU114124 - Stack-based buffer overflow
CVE-2025-33092		 CWE-121 Medium
No
No
 2.3.6.1 15.08.2025 SB20250815114
SB2025081836
SB2025090308
and 5 more
#VU114105 - Stack-based buffer overflow
CVE-2024-51473		 CWE-121 High
No
No
 2.3.6.1 15.08.2025 SB2025081511
SB2025081836
SB2025090308
and 4 more
#VU114104 - Stack-based buffer overflow
CVE-2024-49828		 CWE-121 High
No
No
 2.3.6.1 15.08.2025 SB2025081510
SB2025081836
SB2025090308
and 4 more
#VU113509 - Improper input validation
CVE-2025-41241		 CWE-20 Low
No
No
 2.3.6.1 30.07.2025 SB2025073050
SB2026021319
#VU113085 - Interpretation Conflict
CVE-2024-56339		 CWE-436 Medium
No
No
 2.3.6.1 21.07.2025 SB2025072116
SB2025072130
SB2025072305
and 45 more
#VU112940 - Improper input validation
CVE-2025-30761		 CWE-20 Medium
No
No
 2.3.6.1 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 77 more
#VU112941 - Improper input validation
CVE-2025-30754		 CWE-20 Medium
No
No
 2.3.6.1 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112132 - Stack-based buffer overflow
CVE-2025-4447		 CWE-121 Medium
No
No
 2.3.6.1 03.07.2025 SB2025070315
SB2025070316
SB2025070319
and 54 more
#VU111225 - Integer overflow
CVE-2025-6021		 CWE-190 High
No
No
 2.3.6.1 17.06.2025 SB2025061921
SB2025062408
SB2025062747
and 63 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Public exploit available
No
 2.3.6.1 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU109487 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-41228		 CWE-79 Low
No
No
 2.3.6.1 20.05.2025 SB2025052065
SB2025052066
SB2025100354
#VU108923 - Command injection
CVE-2025-1137		 CWE-77 Medium
No
No
 2.3.6.1 12.05.2025 SB2026020328
#VU107520 - Improper input validation
CVE-2025-21587		 CWE-20 Medium
No
No
 2.3.6.1 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 103 more
#VU105983 - Resource exhaustion
CVE-2025-30204		 CWE-400 Medium
No
No
 2.3.6.1 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 2.3.6.1 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU96058 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50314		 CWE-200 Low
No
No
 2.3.6.1 15.08.2024 SB2024081566
SB2024091324
SB2024091814
and 44 more


Showing elements 1 - 20 out of 71