Known vulnerabilities in IBM Cloud Pak System - page 16

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 2.3.4.1, 2.3.5.0 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU94329 - NULL Pointer Dereference
CVE-2024-37890		 CWE-476 Medium
No
No
 2.3.4.1, 2.3.5.0 15.07.2024 SB2024071508
SB2024071933
SB2024081608
and 32 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067		 CWE-185 Medium
No
No
 2.3.4.1, 2.3.5.0 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU92405 - Uncontrolled Memory Allocation
CVE-2024-4068		 CWE-789 Medium
No
No
 2.3.4.1, 2.3.5.0 20.06.2024 SB20240620121
SB2024062833
SB2024070809
and 51 more
#VU92245 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-33883		 CWE-1321 High
Available
No
 2.3.4.1, 2.3.5.0 19.06.2024 SB2024061916
SB2024062871
SB2024072414
and 11 more
#VU90715 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-29180		 CWE-22 Medium
No
No
 2.3.4.1, 2.3.5.0 03.06.2024 SB2024060314
SB2024060328
SB2024060410
and 18 more
#VU89712 - Stack-based buffer overflow
CVE-2024-33599		 CWE-121 High
No
No
 2.3.4.1 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 84 more
#VU89709 - Memory corruption
CVE-2024-33602		 CWE-119 Medium
No
No
 2.3.4.1 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 91 more
#VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24788		 CWE-835 Medium
No
No
 2.3.4.1, 2.3.5.0 09.05.2024 SB2024050936
SB2024050937
SB2024051029
and 43 more
#VU88822 - Memory corruption
CVE-2024-2961		 CWE-119 High
Available
Exploited
 2.3.4.1 18.04.2024 SB2024041855
SB2024041856
SB2024041857
and 107 more
#VU88532 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-29041		 CWE-601 Medium
No
No
 2.3.4.1, 2.3.5.0 15.04.2024 SB2024041530
SB2024041532
SB2024042918
and 44 more
#VU88184 - Resource exhaustion
CVE-2023-45288		 CWE-400 Medium
Available
No
 2.3.4.1, 2.3.5.0 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU87734 - Resource exhaustion
CVE-2024-28863		 CWE-400 Medium
No
No
 2.3.4.1, 2.3.5.0 22.03.2024 SB2024032234
SB2024052306
SB2024061114
and 30 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757		 CWE-611 Medium
No
No
 2.3.4.1 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 74 more
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 2.3.4.1 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU78463 - Resource Management Errors
CVE-2023-3446		 CWE-399 Medium
No
No
 2.3.4.1 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU76651 - Resource Management Errors
CVE-2023-2650		 CWE-399 Medium
No
No
 2.3.4.1, 2.3.5.0 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU74149 - Security Features
CVE-2023-0466		 CWE-254 Low
No
No
 2.3.4.1, 2.3.5.0 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465		 CWE-347 Low
No
No
 2.3.4.1, 2.3.5.0 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464		 CWE-400 Medium
No
No
 2.3.4.1, 2.3.5.0 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more


Showing elements 301 - 320 out of 653