Known vulnerabilities in IBM Cloud Pak System - page 19

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86944 - Server-Side Request Forgery (SSRF)
CVE-2023-42282		 CWE-918 Medium
No
No
 2.3.3.7 iFix 01 01.03.2024 SB2024030127
SB2024030148
SB2024030415
and 29 more
#VU86346 - Resource exhaustion
CVE-2023-30443		 CWE-400 Low
No
No
 2.3.3.7 iFix 01 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 11 more
#VU86345 - Resource exhaustion
CVE-2023-30448		 CWE-400 Medium
No
No
 2.3.3.7 iFix 01 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 11 more
#VU86342 - Resource exhaustion
CVE-2023-30445		 CWE-400 Medium
No
No
 2.3.3.7 iFix 01 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 11 more
#VU86341 - Resource exhaustion
CVE-2023-30449		 CWE-400 Medium
No
No
 2.3.3.7 iFix 01 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 11 more
#VU86337 - Resource exhaustion
CVE-2023-30447		 CWE-400 Medium
No
No
 2.3.3.7 iFix 01 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 11 more
#VU86336 - Resource exhaustion
CVE-2023-30446		 CWE-400 Medium
No
No
 2.3.3.7 iFix 01 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 11 more
#VU86309 - Observable discrepancy
CVE-2023-45287		 CWE-203 Medium
No
No
 2.3.3.6 iFix 1 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU83267 - Improper input validation
CVE-2023-5676		 CWE-20 Low
No
No
 2.3.4.0 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 2.3.4.0 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU81447 - Use After Free
CVE-2023-4806		 CWE-416 Medium
No
No
 2.3.4.0 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Available
Exploited
 2.3.4.0 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU80746 - Permissions, Privileges, and Access Controls
CVE-2023-4607		 CWE-264 Medium
No
No
 2.3.4.0 13.09.2023 SB2023091338
SB2024082737
#VU78576 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34968		 CWE-200 Low
No
No
 2.3.4.0 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 27 more
#VU78575 - Type confusion
CVE-2023-34967		 CWE-843 Medium
No
No
 2.3.4.0 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 32 more
#VU73739 - Exposure of sensitive information to an unauthorized actor
CVE-2023-25495		 CWE-200 Low
No
No
 2.3.4.0 15.03.2023 SB2023031554
SB2024082737
#VU73738 - Use of Externally-Controlled Format String
CVE-2023-25492		 CWE-134 Medium
No
No
 2.3.4.0 15.03.2023 SB2023031554
SB2024082737
#VU73737 - Improper Access Control
CVE-2023-0683		 CWE-284 Medium
No
No
 2.3.4.0 15.03.2023 SB2023031554
SB2024082737
#VU67270 - Use of Insufficiently Random Values
CVE-2022-1615		 CWE-330 Low
No
No
 2.3.4.0 13.09.2022 SB2022091371
SB2022091377
SB2022091448
and 18 more
#VU65827 - Use After Free
CVE-2022-32746		 CWE-416 Low
No
No
 2.3.4.0 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 30 more


Showing elements 361 - 380 out of 653