Known vulnerabilities in IBM Cloud Pak System - page 22

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79749 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-46751		 CWE-611 High
No
No
 2.3.3.7 iFix 01 21.08.2023 SB2023082105
SB2023090730
SB2023101825
and 18 more
#VU77530 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29404		 CWE-94 Medium
No
No
 2.3.3.6 iFix 1 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 44 more
#VU76617 - Server-Side Request Forgery (SSRF)
CVE-2023-28155		 CWE-918 Medium
No
No
 2.3.3.7 iFix 01 30.05.2023 SB2023053012
SB2023053141
SB2023062120
and 17 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400		 CWE-79 Medium
No
No
 2.3.3.6 iFix 1 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540		 CWE-94 Medium
No
No
 2.3.3.6 iFix 1 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75501 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-37866		 CWE-22 Medium
No
No
 2.3.3.7 iFix 01 26.04.2023 SB2023042603
SB2023050803
SB2023051504
and 7 more
#VU75226 - Improper input validation
CVE-2022-37865		 CWE-20 High
No
No
 2.3.3.7 iFix 01 18.04.2023 SB20230418136
SB2023050803
SB2023051504
and 7 more
#VU74469 - Unprotected Alternate Channel
CVE-2023-28842		 CWE-420 Medium
No
No
 2.3.3.6 iFix 1 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 19 more
#VU74468 - Unprotected Alternate Channel
CVE-2023-28840		 CWE-420 Medium
No
No
 2.3.3.6 iFix 1 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 20 more
#VU74467 - Missing Encryption of Sensitive Data
CVE-2023-28841		 CWE-311 Medium
No
No
 2.3.3.6 iFix 1 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 18 more
#VU73722 - Resource exhaustion
CVE-2022-41725		 CWE-400 Medium
No
No
 2.3.3.6 iFix 1 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU73264 - Incorrect Calculation
CVE-2023-24532		 CWE-682 High
No
No
 2.3.3.6 iFix 1 13.03.2023 SB2023031318
SB2023031319
SB2023031537
and 43 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881		 CWE-407 Medium
No
No
 2.3.3.7 iFix 01 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 2.3.3.7 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72685 - Resource Management Errors
CVE-2022-41724		 CWE-399 Medium
No
No
 2.3.3.6 iFix 1, 2.3.3.7 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU72321 - Improper Privilege Management
CVE-2022-36109		 CWE-269 Low
No
No
 2.3.3.6 16.02.2023 SB2023021619
SB2023021620
SB2023031742
and 14 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 2.3.3.6 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717		 CWE-770 Medium
Available
No
 2.3.3.6 iFix 1 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU56963 - Resource exhaustion
CVE-2021-3749		 CWE-400 Medium
No
No
 2.3.3.7 iFix 01 30.09.2021 SB2021093011
SB2021093012
SB2021120334
and 5 more
#VU49251 - Server-Side Request Forgery (SSRF)
CVE-2020-28168		 CWE-918 Medium
No
No
 2.3.3.7 iFix 01 06.11.2020 SB2021010417
SB2021022518
SB2022061413
and 4 more


Showing elements 421 - 440 out of 653