Known vulnerabilities in IBM Cloud Pak System - page 26

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73872 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29804		 CWE-22 Medium
No
No
 2.3.3.6 21.03.2023 SB2022071516
SB2023011810
SB2023040531
and 11 more
#VU70080 - Improper input validation
CVE-2022-31698		 CWE-20 Medium
Available
No
 2.3.3.6 09.12.2022 SB2022120903
SB2023040648
#VU70079 - Information Exposure Through Log Files
CVE-2022-31697		 CWE-532 Low
No
No
 2.3.3.6 09.12.2022 SB2022120903
SB2023040648
SB2023051945
and 1 more
#VU70078 - Heap-based Buffer Overflow
CVE-2022-31699		 CWE-122 Low
No
No
 2.3.3.6 09.12.2022 SB2022120902
SB2023040649
#VU67978 - Deserialization of Untrusted Data
CVE-2022-31680		 CWE-502 Low
No
No
 2.3.3.6 07.10.2022 SB2022100705
SB2022112255
SB2023040649
#VU67532 - Use After Free
CVE-2022-40674		 CWE-416 High
No
No
 2.3.3.6 21.09.2022 SB2022092118
SB2022092119
SB2022092317
and 111 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629		 CWE-330 Medium
No
No
 2.3.3.6 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU66070 - Resource exhaustion
CVE-2022-30633		 CWE-400 Medium
No
No
 2.3.3.6 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66067 - Resource exhaustion
CVE-2022-30632		 CWE-400 Medium
No
No
 2.3.3.6 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66066 - Security Features
CVE-2022-32148		 CWE-254 Medium
No
No
 2.3.3.6 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66065 - Resource exhaustion
CVE-2022-1962		 CWE-400 Medium
No
No
 2.3.3.6 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 73 more
#VU64650 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22390		 CWE-200 Low
No
No
 2.3.3.6 24.06.2022 SB2022062419
SB2022082224
SB2023040617
#VU64634 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-22389		 CWE-89 Low
No
No
 2.3.3.6 24.06.2022 SB2022062405
SB2022082224
SB2023040617
#VU64376 - Incomplete cleanup
CVE-2022-21127		 CWE-459 Low
No
No
 2.3.3.6 14.06.2022 SB2022061463
SB2022061464
SB2022061630
and 36 more
#VU64364 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21123		 CWE-200 Low
No
No
 2.3.3.6 14.06.2022 SB2022061454
SB2022061465
SB2022061463
and 97 more
#VU64365 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21125		 CWE-200 Low
No
No
 2.3.3.6 14.06.2022 SB2022061454
SB2022061467
SB2022061463
and 96 more
#VU64366 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21166		 CWE-200 Low
No
No
 2.3.3.6 14.06.2022 SB2022061454
SB2022061466
SB2022061463
and 102 more
#VU61199 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0002		 CWE-200 Low
No
No
 2.3.3.6 09.03.2022 SB2022030908
SB2022031106
SB2022031401
and 33 more
#VU61198 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0001		 CWE-200 Low
No
No
 2.3.3.6 09.03.2022 SB2022030908
SB2022031106
SB2022031401
and 47 more
#VU60186 - Out-of-bounds write
CVE-2021-44142		 CWE-787 High
Available
No
 2.3.3.6 31.01.2022 SB2022013111
SB2022013118
SB2022013119
and 36 more


Showing elements 501 - 520 out of 653