Known vulnerabilities in IBM Cloud Pak System - page 2

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 670
Public exploits: 49
Known exploited (KEV): 17
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 670 known vulnerabilities: 8 critical, 83 high, 399 medium, 180 low Critical High Medium Low

Vulnerabilities (670)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127582 - Allocation of Resources Without Limits or Throttling
CVE-2026-22036		 CWE-770 Medium
No
No
 2.3.5.1 24.04.2026 SB20260424138
SB20260424156
SB20260424157
and 9 more
#VU127581 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-1525		 CWE-444 Medium
No
No
 2.3.5.1 24.04.2026 SB20260424137
SB20260424148
SB20260424149
and 12 more
#VU127579 - Improper Validation of Specified Quantity in Input
CVE-2026-1528		 CWE-1284 Medium
No
No
 2.3.5.1 24.04.2026 SB20260424137
SB20260424148
SB20260424149
and 13 more
#VU127578 - Improper Validation of Specified Quantity in Input
CVE-2026-2229		 CWE-1284 Medium
No
No
 2.3.5.1 24.04.2026 SB20260424137
SB20260424148
SB20260424149
and 12 more
#VU127577 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-1527		 CWE-93 Low
No
No
 2.3.5.1 24.04.2026 SB20260424137
SB20260424148
SB20260424153
and 11 more
#VU127576 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-1526		 CWE-409 Medium
No
No
 2.3.5.1 24.04.2026 SB20260424137
SB20260424148
SB20260424149
and 12 more
#VU126758 - Improper input validation
CVE-2026-22016		 CWE-20 Medium
No
No
 2.3.5.1 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 80 more
#VU124875 - Use of Hard-coded Cryptographic Key
CVE-2025-14923		 CWE-321 Low
No
No
 2.3.5.1 06.04.2026 SB2026040626
SB2026040627
SB2026041006
and 18 more
#VU123981 - Resource exhaustion
CVE-2025-58181		 CWE-400 Medium
No
No
 2.3.5.1 13.03.2026 SB2025122903
SB2026031315
SB2026031321
and 22 more
#VU120612 - Out-of-bounds read
CVE-2025-47914		 CWE-125 Medium
No
No
 2.3.5.1 29.12.2025 SB2025122903
SB2025122904
SB2025123103
and 20 more
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 2.3.5.1 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 55 more
#VU116142 - Uncontrolled Recursion
CVE-2025-53864		 CWE-674 Medium
No
No
 2.3.5.1 26.09.2025 SB2025092630
SB2025092631
SB2025100301
and 27 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 2.3.5.1 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 2.3.5.1 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 182 more
#VU108837 - Improper Resource Shutdown or Release
CVE-2024-13009		 CWE-404 Medium
No
No
 2.3.5.1 09.05.2025 SB2025050925
SB2025052987
SB2025060616
and 22 more
#VU97687 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6484		 CWE-79 Medium
No
No
 2.3.5.1 25.09.2024 SB2024092512
SB20241230139
SB2025060920
and 3 more
#VU86917 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2021-4264		 CWE-1321 Medium
No
No
 2.3.5.1 29.02.2024 SB2024022927
SB2026062620
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545		 CWE-122 High
Available
No
 2.3.5.1 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916		 CWE-770 Medium
No
No
 2.3.5.1 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU60621 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23445		 CWE-79 Low
No
No
 2.3.5.1 15.02.2022 SB2021092717
SB2022021511
SB2022080802
and 11 more


Showing elements 21 - 40 out of 670