Known vulnerabilities in IBM Cloud Pak System - page 8

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 653
Public exploits: 48
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak System IBM Cloud Pak System is affected by 653 known vulnerabilities: 8 critical, 80 high, 388 medium, 177 low Critical High Medium Low

Vulnerabilities (653)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110091 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-55885		 CWE-327 Medium
No
No
 2.3.6.0 03.06.2025 SB2025060315
SB2025060320
SB2025070167
#VU108925 - Always-Incorrect Control Flow Implementation
CVE-2025-32996		 CWE-670 Medium
No
No
 2.3.6.0 12.05.2025 SB2025051231
SB2025051312
SB2025053028
and 11 more
#VU106348 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-30223		 CWE-79 Low
Available
No
 2.3.6.0 01.04.2025 SB2025040123
SB2025061855
SB2025070167
#VU105862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-57965		 CWE-79 Medium
No
No
 2.3.6.0 19.03.2025 SB2025031916
SB2025031918
SB2025050262
and 14 more
#VU105452 - Server-Side Request Forgery (SSRF)
CVE-2025-27152		 CWE-918 Medium
Available
No
 2.3.6.0 07.03.2025 SB2025030777
SB2025031918
SB2025032417
and 42 more
#VU105280 - Out-of-bounds read
CVE-2025-22226		 CWE-125 High
No
Exploited
 2.3.6.0 04.03.2025 SB2025030423
SB2025030425
SB2025030426
and 3 more
#VU105279 - Permissions, Privileges, and Access Controls
CVE-2025-22225		 CWE-264 High
No
Exploited
 2.3.6.0 04.03.2025 SB2025030423
SB2025051952
SB2025052027
and 1 more
#VU105278 - Heap-based Buffer Overflow
CVE-2025-22224		 CWE-122 High
No
Exploited
 2.3.6.0 04.03.2025 SB2025030423
SB2025030425
SB2025051952
and 2 more
#VU101027 - Error Handling
CVE-2024-21536		 CWE-388 Medium
No
No
 2.3.6.0 28.11.2024 SB2024112825
SB2024112826
SB2024120211
and 22 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538		 CWE-185 Medium
No
No
 2.3.6.0 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU99280 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45071		 CWE-79 Low
No
No
 - 23.10.2024 SB2024102327
SB2024102343
SB2024102353
and 11 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 2.3.6.0 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU97226 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-27267		 CWE-362 Medium
No
No
 2.3.4.1 iFix 1 12.09.2024 SB2024091291
SB2024091292
SB2024091618
and 57 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590		 CWE-405 Medium
Available
No
 2.3.6.0 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU94558 - Improper input validation
CVE-2024-21144		 CWE-20 Low
No
No
 2.3.4.1 iFix 1 18.07.2024 SB20240718154
SB20240718155
SB20240718192
and 114 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 2.3.4.1 iFix 1 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573		 CWE-918 Medium
No
No
 2.3.6.0 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93543 - Server-Side Request Forgery (SSRF)
CVE-2024-38476		 CWE-918 High
No
No
 2.3.6.0 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 61 more
#VU93540 - Improper input validation
CVE-2024-38473		 CWE-20 Medium
Available
No
 2.3.6.0 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709		 CWE-113 Medium
No
No
 2.3.6.0 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 62 more


Showing elements 141 - 160 out of 653