Known vulnerabilities in IBM Cloud Pak System - page 3

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127600 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-42037		 CWE-93 Medium
No
No
 2.3.5.1 24.04.2026 SB20260424169
SB2026062221
SB2026062508
and 5 more
#VU125562 - Unchecked Return Value
CVE-2026-31790		 CWE-252 Medium
No
No
 2.3.5.1 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 27 more
#VU125567 - NULL Pointer Dereference
CVE-2026-28390		 CWE-476 Medium
No
No
 2.3.5.1 09.04.2026 SB2026040943
SB2026040944
SB2026040992
and 50 more
#VU125568 - Heap-based Buffer Overflow
CVE-2026-31789		 CWE-122 Medium
No
No
 2.3.5.1 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 23 more
#VU122086 - Type confusion
CVE-2026-22796		 CWE-843 Medium
No
No
 2.3.5.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 51 more
#VU122083 - Type confusion
CVE-2025-69420		 CWE-843 Medium
No
No
 2.3.5.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 49 more
#VU122082 - Out-of-bounds write
CVE-2025-69419		 CWE-787 Low
No
No
 2.3.5.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 69 more
#VU122081 - Cleartext Transmission of Sensitive Information
CVE-2025-69418		 CWE-319 Low
No
No
 2.3.5.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 46 more
#VU122080 - Out-of-bounds write
CVE-2025-68160		 CWE-787 Medium
No
No
 2.3.5.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 49 more
#VU122079 - Resource exhaustion
CVE-2025-66199		 CWE-400 Medium
No
No
 2.3.5.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 18 more
#VU122078 - Numeric Truncation Error
CVE-2025-15469		 CWE-197 Low
No
No
 2.3.5.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 15 more
#VU122077 - NULL Pointer Dereference
CVE-2025-15468		 CWE-476 Medium
No
No
 2.3.5.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 19 more
#VU122076 - Stack-based buffer overflow
CVE-2025-15467		 CWE-121 High
Available
No
 2.3.5.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 66 more
#VU119150 - Integer overflow
CVE-2025-55753		 CWE-190 Low
No
No
 2.3.5.1 04.12.2025 SB2025120441
SB2025121923
SB2025121940
and 32 more
#VU119149 - Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
CVE-2025-58098		 CWE-97 Low
Available
No
 2.3.5.1 04.12.2025 SB2025120441
SB2025121923
SB2025121940
and 47 more
#VU119147 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-65082		 CWE-74 Low
No
No
 2.3.5.1 04.12.2025 SB2025120441
SB2025121923
SB2025122202
and 33 more
#VU119146 - Improper input validation
CVE-2025-66200		 CWE-20 Low
No
No
 2.3.5.1 04.12.2025 SB2025120441
SB2025121923
SB2025122202
and 31 more
#VU116882 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-61984		 CWE-78 Low
No
No
 2.3.5.1 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 27 more
#VU116213 - Out-of-bounds write
CVE-2025-9230		 CWE-787 Medium
No
No
 2.3.5.1 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more
#VU98757 - Out-of-bounds write
CVE-2024-9143		 CWE-787 Low
No
No
 2.3.5.1 16.10.2024 SB20241016108
SB2024102219
SB2024102417
and 59 more


Showing elements 41 - 60 out of 653