Known vulnerabilities in IBM Cloud Pak System - page 17

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96788 - Exposure of sensitive information to an unauthorized actor
CVE-2024-22275		 CWE-200 Low
No
No
 2.3.4.1 04.09.2024 SB2024090424
SB2024102802
SB2025012104
#VU96787 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-22274		 CWE-78 Low
Available
No
 2.3.4.1 04.09.2024 SB2024090424
SB2024102802
SB2025012104
#VU96785 - Out-of-bounds write
CVE-2024-22273		 CWE-787 Medium
No
No
 2.3.4.1 04.09.2024 SB2024090421
SB2024090423
SB2024102803
#VU93319 - Resource exhaustion
CVE-2024-37087		 CWE-400 Medium
No
No
 2.3.4.1 25.06.2024 SB20240625123
SB2024082851
SB2024102802
and 1 more
#VU93318 - Out-of-bounds read
CVE-2024-37086		 CWE-125 Medium
No
No
 2.3.4.1 25.06.2024 SB20240625122
SB2024082851
SB2024102803
and 1 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 2.3.4.1, 24.0.0.6 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU87658 - Incorrect Resource Transfer Between Spheres
CVE-2024-29018		 CWE-669 Medium
No
No
 2.3.4.1 20.03.2024 SB2024032036
SB2024041284
SB2024042466
and 24 more
#VU87132 - Out-of-bounds write
CVE-2024-22254		 CWE-787 Low
No
No
 2.3.4.1 05.03.2024 SB2024030548
SB2024042355
SB2024080137
and 4 more
#VU86988 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50312		 CWE-327 Low
No
No
 2.3.4.1, 24.0.0.6 04.03.2024 SB2024030425
SB2024031819
SB2024032049
and 49 more
#VU86049 - Insufficient Verification of Data Authenticity
CVE-2024-24557		 CWE-345 Medium
No
No
 2.3.4.1 02.02.2024 SB2024020242
SB2024032237
SB2024032712
and 18 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 2.3.4.1 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU71995 - Use After Free
CVE-2023-0215		 CWE-416 Medium
No
No
 2.3.4.0 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 2.3.4.0 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 2.3.4.0 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436		 CWE-113 Medium
No
No
 2.3.4.0 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760		 CWE-444 Medium
No
No
 2.3.4.0 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU68718 - Use After Free
CVE-2022-43680		 CWE-416 Medium
No
No
 2.3.4.0 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 2.3.4.0 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64086 - Resource exhaustion
CVE-2022-30522		 CWE-400 Medium
No
No
 2.3.4.0 08.06.2022 SB2022060817
SB2022060901
SB2022061723
and 31 more
#VU64083 - Out-of-bounds read
CVE-2022-28615		 CWE-125 Low
No
No
 2.3.4.0 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 41 more


Showing elements 321 - 340 out of 653