Known vulnerabilities in IBM Cloud Pak System - page 21

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 2.3.3.7 iFix 01 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81948 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-4759		 CWE-59 Medium
No
No
 2.3.3.7 iFix 01 12.10.2023 SB2023101242
SB2023101243
SB2023103012
and 21 more
#VU81751 - Improper input validation
CVE-2023-36602		 CWE-20 Medium
No
No
 2.3.3.6 iFix 2 10.10.2023 SB2023101035
SB2024010424
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319		 CWE-79 Medium
No
No
 2.3.3.7 iFix 01 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39318		 CWE-79 Medium
No
No
 2.3.3.7 iFix 01 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 61 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 2.3.3.7 iFix 01 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409		 CWE-295 Medium
No
No
 2.3.3.7 iFix 01 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU76906 - Out-of-bounds read
CVE-2023-2597		 CWE-125 High
No
No
 2.3.3.7 iFix 01 05.06.2023 SB2023060525
SB2023060705
SB2023060930
and 86 more
#VU75264 - Improper input validation
CVE-2023-21939		 CWE-20 Medium
Available
No
 2.3.3.7 iFix 01 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75265 - Improper input validation
CVE-2023-21938		 CWE-20 Low
No
No
 2.3.3.7 iFix 01 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968		 CWE-20 Low
No
No
 2.3.3.7 iFix 01 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937		 CWE-20 Low
No
No
 2.3.3.7 iFix 01 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU75261 - Improper input validation
CVE-2023-21967		 CWE-20 Medium
No
No
 2.3.3.7 iFix 01 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU75262 - Improper input validation
CVE-2023-21954		 CWE-20 Medium
No
No
 2.3.3.7 iFix 01 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 2.3.3.7 iFix 01 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU72247 - Improper input validation
CVE-2022-38900		 CWE-20 Medium
No
No
 2.3.3.7 iFix 01 15.02.2023 SB2023021531
SB2023022714
SB2023032315
and 35 more
#VU72075 - Insecure Temporary File
CVE-2023-0482		 CWE-377 Low
No
No
 2.3.3.7 iFix 01 08.02.2023 SB2023020877
SB2023033003
SB2023033004
and 36 more
#VU67974 - Incorrect Regular Expression
CVE-2022-25858		 CWE-185 Medium
No
No
 2.3.3.7 iFix 01 06.10.2022 SB2022100649
SB2022100650
SB2022110245
and 8 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 2.3.3.7 iFix 01 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU37568 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-6561		 CWE-79 Low
No
No
 2.3.3.7 iFix 01 02.02.2018 SB2018020212
SB2023090406
SB2024010446
and 3 more


Showing elements 401 - 420 out of 653