Known vulnerabilities in IBM Cloud Pak System - page 2

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126758 - Improper input validation
CVE-2026-22016		 CWE-20 Medium
No
No
 2.3.5.1 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU126761 - Improper input validation
CVE-2026-22021		 CWE-20 Medium
No
No
 2.3.5.1 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 78 more
#VU126762 - Improper input validation
CVE-2026-22013		 CWE-20 Medium
No
No
 2.3.5.1 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 75 more
#VU126764 - Improper input validation
CVE-2026-22018		 CWE-20 Low
No
No
 2.3.5.1 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU126765 - Improper input validation
CVE-2026-22007		 CWE-20 Low
No
No
 2.3.5.1 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU126766 - Improper input validation
CVE-2026-34268		 CWE-20 Low
No
No
 2.3.5.1 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU125564 - Use After Free
CVE-2026-28387		 CWE-416 High
No
No
 2.3.5.1 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 30 more
#VU125565 - NULL Pointer Dereference
CVE-2026-28388		 CWE-476 Low
No
No
 2.3.5.1 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 39 more
#VU125566 - NULL Pointer Dereference
CVE-2026-28389		 CWE-476 Medium
No
No
 2.3.5.1 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 32 more
#VU122085 - NULL Pointer Dereference
CVE-2026-22795		 CWE-476 Medium
No
No
 2.3.5.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 48 more
#VU122084 - NULL Pointer Dereference
CVE-2025-69421		 CWE-476 Medium
No
No
 2.3.5.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 50 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 2.3.5.1 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 2.3.5.1 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 90 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 2.3.5.1 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 92 more
#VU117483 - Improper input validation
CVE-2025-53066		 CWE-20 Medium
No
No
 2.3.5.1 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057		 CWE-20 Medium
No
No
 2.3.5.1 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU116883 - Improper Neutralization of Null Byte or NUL Character
CVE-2025-61985		 CWE-158 Low
No
No
 2.3.5.1 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 25 more
#VU116214 - Covert Timing Channel
CVE-2025-9231		 CWE-385 Low
No
No
 2.3.5.1 01.10.2025 SB2025100119
SB2025100139
SB2025100153
and 10 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545		 CWE-122 High
Available
No
 2.3.5.1 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916		 CWE-770 Medium
No
No
 2.3.5.1 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more


Showing elements 21 - 40 out of 653