Known vulnerabilities in IBM Cloud Pak System - page 7

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113345 - Improper Validation of Array Index
CVE-2025-3357		 CWE-129 Critical
No
No
 2.3.6.0 28.07.2025 SB2025072810
SB2025072811
#VU112106 - Memory corruption
CVE-2025-52999		 CWE-119 Medium
No
No
 2.3.6.0 02.07.2025 SB2025070257
SB2025070261
SB2025070262
and 43 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 2.3.6.0 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU110189 - Stack-based buffer overflow
CVE-2024-49350		 CWE-121 Medium
No
No
 2.3.6.0 04.06.2025 SB2025060418
SB2025072221
SB2025072348
and 3 more
#VU108924 - Improper Check for Unusual or Exceptional Conditions
CVE-2025-32997		 CWE-754 Medium
No
No
 2.3.6.0 12.05.2025 SB2025051232
SB2025051312
SB2025053028
and 11 more
#VU106977 - Deserialization of Untrusted Data
CVE-2025-30065		 CWE-502 High
Available
No
 2.3.6.0 04.04.2025 SB2025040410
SB2025053013
SB2025053029
and 8 more
#VU105459 - Resource exhaustion
CVE-2025-22869		 CWE-400 Low
No
No
 2.3.6.0 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU104123 - Allocation of Resources Without Limits or Throttling
CVE-2024-41761		 CWE-770 Low
No
No
 2.3.6.0 21.02.2025 SB2025022117
SB2025022521
SB2025031921
and 6 more
#VU104121 - Information Exposure Through Log Files
CVE-2024-40679		 CWE-532 Low
No
No
 2.3.6.0 21.02.2025 SB2025022116
SB2025022521
SB2025031921
and 7 more
#VU104120 - Uncontrolled Memory Allocation
CVE-2024-37071		 CWE-789 Low
No
No
 2.3.6.0 21.02.2025 SB2025022115
SB2025022521
SB2025031921
and 6 more
#VU101895 - Inefficient Regular Expression Complexity
CVE-2024-52798		 CWE-1333 Low
No
No
 2.3.6.0 23.12.2024 SB2024122305
SB2024122309
SB2025011306
and 45 more
#VU101777 - Improper Authorization
CVE-2024-45337		 CWE-285 Medium
Available
No
 2.3.6.0 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800		 CWE-79 Medium
No
No
 2.3.6.0 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799		 CWE-79 Low
No
No
 2.3.6.0 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 2.3.6.0 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 2.3.6.0 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU96744 - Type confusion
CVE-2024-6119		 CWE-843 Medium
No
No
 - 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU96716 - Incorrect Regular Expression
CVE-2024-39249		 CWE-185 Medium
No
No
 2.3.6.0 03.09.2024 SB2024090325
SB2024090326
SB2024090359
and 20 more
#VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-5569		 CWE-835 Medium
No
No
 2.3.6.0 26.07.2024 SB2024072688
SB2024072690
SB2024072692
and 59 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 2.3.6.0 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more


Showing elements 121 - 140 out of 653