Known vulnerabilities in IBM Cloud Pak System - page 18

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849		 CWE-200 Low
No
No
 2.3.4.0 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 2.3.4.0 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU83929 - Missing Encryption of Sensitive Data
CVE-2023-45285		 CWE-311 Medium
No
No
 2.3.4.0 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 28 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 2.3.4.0 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU82140 - Improper input validation
CVE-2023-22067		 CWE-20 Medium
No
No
 2.3.4.0 17.10.2023 SB2023101797
SB2023101924
SB2023101990
and 117 more
#VU82141 - Improper input validation
CVE-2023-22081		 CWE-20 Medium
No
No
 2.3.4.0 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU80323 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-26136		 CWE-1321 High
No
No
 2.3.3.7 IF001, 2.3.4.0 04.09.2023 SB2023090411
SB2023090423
SB2023090816
and 42 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 2.3.4.0 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 2.3.4.0 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU76180 - Incorrect Regular Expression
CVE-2022-25758		 CWE-185 Medium
No
No
 2.3.4.0 16.05.2023 SB2023051643
SB2023051648
SB2023081005
and 2 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Available
No
 2.3.4.0 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU72146 - Improper input validation
CVE-2012-5784		 CWE-20 Medium
No
No
 2.3.4.0 13.02.2023 SB2023021403
SB2023061227
SB2024022640
and 3 more
#VU64081 - Out-of-bounds read
CVE-2022-28614		 CWE-125 Low
No
No
 2.3.4.0 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 36 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377		 CWE-444 Medium
Available
No
 2.3.4.0 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU63576 - Improper Access Control
CVE-2022-31259		 CWE-284 Medium
No
No
 2.3.4.0 24.05.2022 SB2022052408
SB2024051305
SB2024082751
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292		 CWE-78 Medium
Available
No
 2.3.4.0 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 2.3.4.0 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 2.3.4.0 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU41375 - Improper input validation
CVE-2014-3596		 CWE-20 Medium
No
No
 2.3.4.0 27.08.2014 SB2014082703
SB2014091802
SB2023021403
and 5 more
#VU8609 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2008-7220		 CWE-79 Low
No
No
 2.3.4.0 14.09.2009 SB2009091401
SB2015092641
SB2024082751
and 1 more


Showing elements 341 - 360 out of 653