Known vulnerabilities in IBM Cloud Pak System - page 19

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 670
Public exploits: 49
Known exploited (KEV): 17

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 670 known vulnerabilities: 8 critical, 83 high, 399 medium, 180 low Critical High Medium Low

Vulnerabilities (670)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849		 CWE-200 Low
No
No
 2.3.4.0 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 2.3.4.0 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU83929 - Missing Encryption of Sensitive Data
CVE-2023-45285		 CWE-311 Medium
No
No
 2.3.4.0 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 28 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 2.3.4.0 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU83267 - Improper input validation
CVE-2023-5676		 CWE-20 Low
No
No
 2.3.4.0 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 2.3.4.0 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU82140 - Improper input validation
CVE-2023-22067		 CWE-20 Medium
No
No
 2.3.4.0 17.10.2023 SB2023101797
SB2023101924
SB2023101990
and 117 more
#VU82141 - Improper input validation
CVE-2023-22081		 CWE-20 Medium
No
No
 2.3.4.0 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU81447 - Use After Free
CVE-2023-4806		 CWE-416 Medium
No
No
 2.3.4.0 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU80323 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-26136		 CWE-1321 High
No
No
 2.3.3.7 IF001, 2.3.4.0 04.09.2023 SB2023090411
SB2023090423
SB2023090816
and 42 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 2.3.4.0 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 2.3.4.0 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU76180 - Incorrect Regular Expression
CVE-2022-25758		 CWE-185 Medium
No
No
 2.3.4.0 16.05.2023 SB2023051643
SB2023051648
SB2023081005
and 2 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Available
No
 2.3.4.0 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU72146 - Improper input validation
CVE-2012-5784		 CWE-20 Medium
No
No
 2.3.4.0 13.02.2023 SB2023021403
SB2023061227
SB2024022640
and 3 more
#VU63576 - Improper Access Control
CVE-2022-31259		 CWE-284 Medium
No
No
 2.3.4.0 24.05.2022 SB2022052408
SB2024051305
SB2024082751
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 2.3.4.0 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 2.3.4.0 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU41375 - Improper input validation
CVE-2014-3596		 CWE-20 Medium
No
No
 2.3.4.0 27.08.2014 SB2014082703
SB2014091802
SB2023021403
and 5 more
#VU8609 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2008-7220		 CWE-79 Low
No
No
 2.3.4.0 14.09.2009 SB2009091401
SB2015092641
SB2024082751
and 1 more


Showing elements 361 - 380 out of 670