Known vulnerabilities in IBM Cloud Pak System - page 33

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56806 - Improper Authorization
CVE-2021-22017		 CWE-285 Medium
No
Exploited
 2.3.3.4 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56805 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22016		 CWE-79 Low
No
No
 2.3.3.4 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56800 - Improper Authentication
CVE-2021-22011		 CWE-287 Medium
No
No
 2.3.3.4 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU49916 - Stack-based buffer overflow
CVE-2020-27221		 CWE-121 High
No
No
 2.3.3.4 21.01.2021 SB2021012130
SB2021030504
SB2021030505
and 16 more
#VU49271 - Unrestricted Upload of File with Dangerous Type
CVE-2020-4928		 CWE-434 Low
No
No
 2.3.3.3 05.01.2021 SB2021010506
#VU49270 - Session Fixation
CVE-2020-4919		 CWE-384 Medium
No
No
 2.3.3.3 05.01.2021 SB2021010506
#VU49269 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4918		 CWE-200 Low
No
No
 2.3.3.3 05.01.2021 SB2021010506
#VU49268 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4916		 CWE-79 Low
No
No
 2.3.3.3 05.01.2021 SB2021010506
#VU49267 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4913		 CWE-200 Low
No
No
 2.3.3.3 05.01.2021 SB2021010506
#VU49266 - Permissions, Privileges, and Access Controls
CVE-2020-4912		 CWE-264 Medium
No
No
 2.3.3.3 05.01.2021 SB2021010506
#VU49265 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4910		 CWE-79 Low
No
No
 2.3.3.3 05.01.2021 SB2021010506
#VU49264 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4909		 CWE-79 Low
No
No
 2.3.3.3 05.01.2021 SB2021010506
#VU49263 - Cross-Site Request Forgery (CSRF)
CVE-2020-4917		 CWE-352 Low
No
No
 2.3.3.3 05.01.2021 SB2021010506


Showing elements 641 - 660 out of 653