Known vulnerabilities in IBM Cloud Pak System - page 20

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 670
Public exploits: 49
Known exploited (KEV): 17

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 670 known vulnerabilities: 8 critical, 83 high, 399 medium, 180 low Critical High Medium Low

Vulnerabilities (670)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86944 - Server-Side Request Forgery (SSRF)
CVE-2023-42282		 CWE-918 Medium
No
No
 2.3.3.7 iFix 01 01.03.2024 SB2024030127
SB2024030148
SB2024030415
and 29 more
#VU86346 - Resource exhaustion
CVE-2023-30443		 CWE-400 Low
No
No
 2.3.3.7 iFix 01 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 11 more
#VU86345 - Resource exhaustion
CVE-2023-30448		 CWE-400 Medium
No
No
 2.3.3.7 iFix 01 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 11 more
#VU86342 - Resource exhaustion
CVE-2023-30445		 CWE-400 Medium
No
No
 2.3.3.7 iFix 01 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 11 more
#VU86341 - Resource exhaustion
CVE-2023-30449		 CWE-400 Medium
No
No
 2.3.3.7 iFix 01 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 11 more
#VU86340 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-27869		 CWE-94 Medium
No
No
 2.3.3.7 iFix 01 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 12 more
#VU86337 - Resource exhaustion
CVE-2023-30447		 CWE-400 Medium
No
No
 2.3.3.7 iFix 01 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 11 more
#VU86336 - Resource exhaustion
CVE-2023-30446		 CWE-400 Medium
No
No
 2.3.3.7 iFix 01 12.02.2024 SB2024021220
SB2024021317
SB2024021318
and 11 more
#VU86309 - Observable discrepancy
CVE-2023-45287		 CWE-203 Medium
No
No
 2.3.3.6 iFix 1 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU81946 - Insufficient Logging
CVE-2023-23487		 CWE-778 Low
No
No
 2.3.3.7 iFix 01 12.10.2023 SB2023101241
SB2024021220
SB2024021317
and 11 more
#VU81916 - Memory corruption
CVE-2023-30431		 CWE-119 High
No
No
 2.3.3.7 iFix 01 11.10.2023 SB2023101169
SB2024021220
SB2024021317
and 12 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Available
Exploited
 2.3.4.0 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU80746 - Permissions, Privileges, and Access Controls
CVE-2023-4607		 CWE-264 Medium
No
No
 2.3.4.0 13.09.2023 SB2023091338
SB2024082737
#VU78576 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34968		 CWE-200 Low
No
No
 2.3.4.0 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 27 more
#VU78575 - Type confusion
CVE-2023-34967		 CWE-843 Medium
No
No
 2.3.4.0 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 32 more
#VU73739 - Exposure of sensitive information to an unauthorized actor
CVE-2023-25495		 CWE-200 Low
No
No
 2.3.4.0 15.03.2023 SB2023031554
SB2024082737
#VU73738 - Use of Externally-Controlled Format String
CVE-2023-25492		 CWE-134 Medium
No
No
 2.3.4.0 15.03.2023 SB2023031554
SB2024082737
#VU73737 - Improper Access Control
CVE-2023-0683		 CWE-284 Medium
No
No
 2.3.4.0 15.03.2023 SB2023031554
SB2024082737
#VU67270 - Use of Insufficiently Random Values
CVE-2022-1615		 CWE-330 Low
No
No
 2.3.4.0 13.09.2022 SB2022091371
SB2022091377
SB2022091448
and 18 more
#VU65827 - Use After Free
CVE-2022-32746		 CWE-416 Low
No
No
 2.3.4.0 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 30 more


Showing elements 381 - 400 out of 670