Known vulnerabilities in IBM Cloud Pak System - page 10

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103054 - Incorrect Regular Expression
CVE-2020-7662		 CWE-185 Medium
No
No
 2.3.3.5 20.01.2025 SB2025012075
SB2025012076
SB2020070752
#VU81048 - Incorrect Regular Expression
CVE-2021-29059		 CWE-185 Medium
No
No
 2.3.3.5 22.09.2023 SB2023092211
SB2025012076
#VU76058 - Improper input validation
CVE-2021-23424		 CWE-20 Medium
No
No
 2.3.3.5 12.05.2023 SB2023051210
SB2023051637
SB2023101153
and 1 more
#VU67254 - Authorization Bypass Through User-Controlled Key
CVE-2022-0686		 CWE-639 Medium
No
No
 2.3.3.5 13.09.2022 SB2022022004
SB2022091358
SB2023032938
and 3 more
#VU67251 - Authorization Bypass Through User-Controlled Key
CVE-2022-0512		 CWE-639 Medium
No
No
 2.3.3.5 13.09.2022 SB2022021433
SB2022091358
SB2023032938
and 3 more
#VU66955 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7788		 CWE-94 Medium
No
No
 2.3.3.5 05.09.2022 SB2020121120
SB2022090501
SB2022091209
and 21 more
#VU65355 - Incorrect Regular Expression
CVE-2020-7753		 CWE-185 Medium
No
No
 2.3.3.5 15.07.2022 SB2020102724
SB2022071510
SB2023062230
and 12 more
#VU63709 - Incorrect Regular Expression
CVE-2021-33623		 CWE-185 Medium
No
No
 2.3.3.5 26.05.2022 SB2022071701
SB2023040536
SB2023051544
and 2 more
#VU63698 - Incorrect Regular Expression
CVE-2021-33502		 CWE-185 Medium
No
No
 2.3.3.5 26.05.2022 SB2021052416
SB2022052615
SB2022060618
and 17 more
#VU58206 - Absolute Path Traversal
CVE-2021-32803		 CWE-36 Medium
No
No
 2.3.3.5 17.11.2021 SB2021080329
SB2022031104
SB2022060618
and 26 more
#VU58204 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-37713		 CWE-22 Medium
No
No
 2.3.3.5 17.11.2021 SB2021111707
SB2022031104
SB2022060618
and 13 more
#VU58203 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-37712		 CWE-22 Medium
No
No
 2.3.3.5 17.11.2021 SB2021111707
SB2021111710
SB2022031104
and 24 more
#VU58202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-37701		 CWE-22 Medium
No
No
 2.3.3.5 17.11.2021 SB2021111706
SB2021111710
SB2022031104
and 24 more
#VU55484 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-3664		 CWE-601 Low
No
No
 2.3.3.5 02.08.2021 SB2021080206
SB2021082509
SB2023032938
and 3 more
#VU54394 - Incorrect Regular Expression
CVE-2020-28500		 CWE-185 Medium
No
No
 2.3.3.5 27.06.2021 SB2021062702
SB2021062703
SB2021090905
and 30 more
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 2.3.3.5 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 59 more
#VU52909 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7774		 CWE-94 Medium
No
No
 2.3.3.5 06.05.2021 SB2020111735
SB2021050615
SB2021092814
and 24 more
#VU52194 - Incorrect Regular Expression
CVE-2021-27290		 CWE-185 Medium
No
No
 2.3.3.5 12.03.2021 SB2021041364
SB2021070819
SB2021101939
and 32 more
#VU50868 - Exposure of sensitive information to an unauthorized actor
CVE-2021-27515		 CWE-200 Medium
No
No
 2.3.3.5 23.02.2021 SB2021022310
SB2023032938
SB2024010530
and 2 more
#VU41989 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8203		 CWE-94 Medium
No
No
 2.3.3.5 10.08.2020 SB2020071548
SB2020122111
SB2021042308
and 31 more


Showing elements 181 - 200 out of 653