Known vulnerabilities in IBM Cloud Pak System - page 17

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 670
Public exploits: 49
Known exploited (KEV): 17

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 670 known vulnerabilities: 8 critical, 83 high, 399 medium, 180 low Critical High Medium Low

Vulnerabilities (670)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 2.3.4.1, 2.3.5.0 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU94329 - NULL Pointer Dereference
CVE-2024-37890		 CWE-476 Medium
No
No
 2.3.4.1, 2.3.5.0 15.07.2024 SB2024071508
SB2024071933
SB2024081608
and 32 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067		 CWE-185 Medium
No
No
 2.3.4.1, 2.3.5.0 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU92405 - Uncontrolled Memory Allocation
CVE-2024-4068		 CWE-789 Medium
No
No
 2.3.4.1, 2.3.5.0 20.06.2024 SB20240620121
SB2024062833
SB2024070809
and 51 more
#VU92245 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-33883		 CWE-1321 High
Available
No
 2.3.4.1, 2.3.5.0 19.06.2024 SB2024061916
SB2024062871
SB2024072414
and 11 more
#VU90715 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-29180		 CWE-22 Medium
No
No
 2.3.4.1, 2.3.5.0 03.06.2024 SB2024060314
SB2024060328
SB2024060410
and 18 more
#VU89712 - Stack-based buffer overflow
CVE-2024-33599		 CWE-121 High
No
No
 2.3.4.1 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 84 more
#VU89709 - Memory corruption
CVE-2024-33602		 CWE-119 Medium
No
No
 2.3.4.1 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 91 more
#VU88822 - Memory corruption
CVE-2024-2961		 CWE-119 High
Available
Exploited
 2.3.4.1 18.04.2024 SB2024041855
SB2024041856
SB2024041857
and 107 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 2.3.4.1, 24.0.0.6 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88532 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-29041		 CWE-601 Medium
No
No
 2.3.4.1, 2.3.5.0 15.04.2024 SB2024041530
SB2024041532
SB2024042918
and 44 more
#VU87734 - Resource exhaustion
CVE-2024-28863		 CWE-400 Medium
No
No
 2.3.4.1, 2.3.5.0 22.03.2024 SB2024032234
SB2024052306
SB2024061114
and 30 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757		 CWE-611 Medium
No
No
 2.3.4.1 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 75 more
#VU86988 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50312		 CWE-327 Low
No
No
 2.3.4.1, 24.0.0.6 04.03.2024 SB2024030425
SB2024031819
SB2024032049
and 49 more
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 2.3.4.1 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 2.3.4.1 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446		 CWE-399 Medium
No
No
 2.3.4.1 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU74149 - Security Features
CVE-2023-0466		 CWE-254 Low
No
No
 2.3.4.1, 2.3.5.0 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465		 CWE-347 Low
No
No
 2.3.4.1, 2.3.5.0 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464		 CWE-400 Medium
No
No
 2.3.4.1, 2.3.5.0 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more


Showing elements 321 - 340 out of 670