Known vulnerabilities in IBM Cloud Pak System - page 27

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 2.3.3.6 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 2.3.3.6 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 2.3.3.6 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 2.3.3.6 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 2.3.3.6 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66748 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-5259		 CWE-94 Medium
No
No
 2.3.3.6 24.08.2022 SB20200310151
SB2022082433
SB2023031611
and 8 more
#VU66069 - Resource exhaustion
CVE-2022-28131		 CWE-400 Medium
No
No
 2.3.3.6 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 2.3.3.6 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU59053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42550		 CWE-94 Medium
No
No
 2.3.3.6 19.12.2021 SB2021121904
SB2022022307
SB2022032929
and 21 more
#VU54856 - Resource exhaustion
CVE-2021-36374		 CWE-400 Medium
No
No
 2.3.3.6 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 43 more
#VU54855 - Resource exhaustion
CVE-2021-36373		 CWE-400 Medium
No
No
 2.3.3.6 14.07.2021 SB2021071409
SB2021072011
SB2022080830
and 16 more
#VU51511 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13936		 CWE-94 High
No
No
 2.3.3.6 16.03.2021 SB2021031618
SB2021072614
SB2022011911
and 45 more
#VU29228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4051		 CWE-79 Low
No
No
 2.3.3.6 24.06.2020 SB2020062408
SB2022082433
SB2022120724
and 7 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 2.3.3.6 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979		 CWE-264 Low
No
No
 2.3.3.6 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more
#VU25348 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10785		 CWE-79 Low
No
No
 2.3.3.6 14.02.2020 SB2020021405
SB2022082433
SB2023040530
and 7 more
#VU14515 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1000632		 CWE-611 Low
No
No
 2.3.3.6 21.08.2018 SB2018082321
SB2018120722
SB2018121006
and 20 more
#VU36773 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2018-15494		 CWE-74 High
No
No
 2.3.3.6 18.08.2018 SB2018081804
SB2022070505
SB2022082433
and 11 more
#VU8911 - Permissions, Privileges, and Access Controls
CVE-2016-6814		 CWE-264 Low
No
No
 2.3.3.6 20.10.2017 SB2017101714
SB2020031303
SB20200114129
and 12 more
#VU831 - Deserialization of Untrusted Data
CVE-2015-3253		 CWE-502 High
No
No
 2.3.3.6 11.10.2016 SB2020042104
SB2023030707
SB2023040530
and 5 more


Showing elements 521 - 540 out of 653