Known vulnerabilities in IBM Cloud Pak System - page 32

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114445 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-20479		 CWE-327 High
No
No
 - 26.08.2025 SB2022051410
#VU68779 - Improper Validation of Array Index
CVE-2020-28852		 CWE-129 Medium
No
No
 - 26.10.2022 SB2021010205
SB2022102674
SB2022111597
and 13 more
#VU64417 - Exposure of sensitive information to an unauthorized actor
CVE-2021-41092		 CWE-200 Medium
No
No
 - 15.06.2022 SB2021100420
SB2022061528
SB2021101264
and 13 more
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302		 CWE-502 High
No
No
 2.3.3.4 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 2.3.3.4 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Available
Exploited
 - 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 - 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU56799 - Resource exhaustion
CVE-2021-22010		 CWE-400 Medium
No
No
 2.3.3.4 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56798 - Resource exhaustion
CVE-2021-22009		 CWE-400 Medium
No
No
 2.3.3.4 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56797 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22008		 CWE-200 Medium
No
No
 2.3.3.4 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56795 - Improper Authorization
CVE-2021-22006		 CWE-285 High
Available
No
 2.3.3.4 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56793 - Server-Side Request Forgery (SSRF)
CVE-2021-21993		 CWE-918 Medium
No
No
 2.3.3.4 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56792 - Improper input validation
CVE-2021-21992		 CWE-20 Medium
No
No
 2.3.3.4 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56791 - Permissions, Privileges, and Access Controls
CVE-2021-21991		 CWE-264 Low
No
No
 2.3.3.4 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558		 CWE-295 Medium
Available
No
 - 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU54910 - Uncontrolled Recursion
CVE-2021-31525		 CWE-674 Medium
No
No
 - 15.07.2021 SB2021071514
SB2021052725
SB2021071515
and 39 more
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU54833 - Insecure Default Variable Initialization
CVE-2021-0144		 CWE-453 Low
No
No
 - 13.07.2021 SB2021071385
SB2022030922
SB2023022351
#VU53596 - Improper Authentication
CVE-2021-21986		 CWE-287 Medium
No
No
 2.3.3.4 26.05.2021 SB2021052634
SB2021101003
SB2021120331
and 3 more
#VU53595 - Improper input validation
CVE-2021-21985		 CWE-20 Critical
Available
Exploited
 2.3.3.4 26.05.2021 SB2021052634
SB2021101003
SB2021120331
and 3 more


Showing elements 621 - 640 out of 653