Known vulnerabilities in IBM Cloud Pak System - page 23

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82321 - Insufficient Session Expiration
CVE-2020-4914		 CWE-613 Low
No
No
 2.3.3.6 iFix 1 24.10.2023 SB2023102421
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609		 CWE-502 High
No
No
 2.3.3.6 iFix 1 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 2.3.3.6 iFix 1 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU77531 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29405		 CWE-94 Medium
No
No
 2.3.3.6 iFix 1 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 45 more
#VU77529 - Permissions, Privileges, and Access Controls
CVE-2023-29403		 CWE-264 Medium
No
No
 2.3.3.6 iFix 1 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 46 more
#VU77528 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29402		 CWE-94 Medium
No
No
 2.3.3.6 iFix 1 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 45 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539		 CWE-79 Medium
No
No
 2.3.3.6 iFix 1 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU75493 - Permissions, Privileges, and Access Controls
CVE-2023-29257		 CWE-264 Low
No
No
 2.3.3.6 iFix 1 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 8 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 2.3.3.6 iFix 1 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU74571 - Resource exhaustion
CVE-2023-24534		 CWE-400 Medium
No
No
 2.3.3.6 iFix 1 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74478 - Improper Access Control
CVE-2023-28154		 CWE-284 Medium
No
No
 2.3.3.6 iFix 1 05.04.2023 SB2023040511
SB2023040515
SB2023041244
and 9 more
#VU71577 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-46175		 CWE-94 Medium
No
No
 2.3.3.6 iFix 1 26.01.2023 SB2023012644
SB2023012645
SB2023013117
and 44 more
#VU71109 - Out-of-bounds write
CVE-2022-45693		 CWE-787 Medium
No
No
 2.3.3.6 iFix 1 11.01.2023 SB2023011159
SB2023011160
SB2023013112
and 45 more
#VU71108 - Out-of-bounds write
CVE-2022-45685		 CWE-787 Medium
No
No
 2.3.3.6 iFix 1 11.01.2023 SB2023011159
SB2023011160
SB2023030328
and 29 more
#VU70332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41720		 CWE-22 Medium
No
No
 2.3.3.6 iFix 1 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 13 more
#VU69942 - Incorrect Regular Expression
CVE-2022-3517		 CWE-185 Medium
No
No
 2.3.3.6 iFix 1 06.12.2022 SB2022120638
SB2022120639
SB2022120640
and 48 more
#VU65655 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-10172		 CWE-611 Medium
No
No
 2.3.3.6 iFix 1 21.07.2022 SB2022072128
SB2021021828
SB2023042803
and 18 more
#VU64379 - Improper input validation
CVE-2022-22444		 CWE-20 Low
No
No
 2.3.3.7 15.06.2022 SB2022061502
SB2022061503
SB2023110625
#VU55416 - Improper input validation
CVE-2012-0881		 CWE-20 Medium
No
No
 2.3.3.6 iFix 1 28.07.2021 SB2021072822
SB2023070731
SB2023102710
and 19 more
#VU21470 - Improper input validation
CVE-2019-10202		 CWE-20 High
No
No
 2.3.3.6 iFix 1 01.10.2019 SB2019100116
SB2019100117
SB2019100118
and 24 more


Showing elements 441 - 460 out of 653