Known vulnerabilities in IBM Cloud Pak System - page 26

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 670
Public exploits: 49
Known exploited (KEV): 17

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 670 known vulnerabilities: 8 critical, 83 high, 399 medium, 180 low Critical High Medium Low

Vulnerabilities (670)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75508 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30441		 CWE-200 Medium
No
No
 2.3.3.6 26.04.2023 SB2023042618
SB2023042749
SB2023050107
and 41 more
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538		 CWE-94 High
No
No
 2.3.3.7 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 2.3.3.7 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843		 CWE-20 Low
No
No
 2.3.3.7 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU70079 - Information Exposure Through Log Files
CVE-2022-31697		 CWE-532 Low
No
No
 2.3.3.6 09.12.2022 SB2022120903
SB2023040648
SB2023051945
and 1 more
#VU70078 - Heap-based Buffer Overflow
CVE-2022-31699		 CWE-122 Low
No
No
 2.3.3.6 09.12.2022 SB2022120902
SB2023040649
#VU70077 - Memory corruption
CVE-2022-31696		 CWE-119 Low
No
No
 2.3.3.6 09.12.2022 SB2022120902
SB2023030226
SB2023040649
and 2 more
#VU68844 - Type confusion
CVE-2022-3676		 CWE-843 Medium
No
No
 2.3.3.7 31.10.2022 SB2022103129
SB2022111110
SB2022111724
and 60 more
#VU68437 - Improper input validation
CVE-2022-21628		 CWE-20 Medium
No
No
 2.3.3.7 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 138 more
#VU68438 - Improper input validation
CVE-2022-21626		 CWE-20 Medium
No
No
 2.3.3.7 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68441 - Improper input validation
CVE-2022-21624		 CWE-20 Low
No
No
 2.3.3.7 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU68442 - Improper input validation
CVE-2022-21619		 CWE-20 Low
No
No
 2.3.3.7 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 140 more
#VU67979 - NULL Pointer Dereference
CVE-2022-31681		 CWE-476 Low
No
No
 2.3.3.6 07.10.2022 SB2022100706
SB2022112255
SB2023030226
and 1 more
#VU67978 - Deserialization of Untrusted Data
CVE-2022-31680		 CWE-502 Low
No
No
 2.3.3.6 07.10.2022 SB2022100705
SB2022112255
SB2023040649
#VU66549 - Permissions, Privileges, and Access Controls
CVE-2022-26373		 CWE-264 Low
No
No
 2.3.3.6 16.08.2022 SB2022081642
SB2022081647
SB2022081745
and 64 more
#VU62399 - Improper input validation
CVE-2022-21426		 CWE-20 Medium
No
No
 2.3.3.7 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU57493 - Improper input validation
CVE-2021-35561		 CWE-20 Medium
No
No
 2.3.3.6, 2.3.3.7 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 94 more
#VU47775 - Improper input validation
CVE-2020-14803		 CWE-20 Medium
No
No
 2.3.3.7 21.10.2020 SB2020102110
SB2020102801
SB2020102802
and 50 more
#VU47777 - Missing Encryption of Sensitive Data
CVE-2020-14781		 CWE-311 Low
No
No
 2.3.3.7 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 48 more
#VU30072 - Improper input validation
CVE-2020-14593		 CWE-20 Medium
No
No
 2.3.3.7 16.07.2020 SB2020071694
SB2020071695
SB2020081001
and 52 more


Showing elements 501 - 520 out of 670