Known vulnerabilities in IBM Cloud Private

Vendor: IBM Corporation
Software: IBM Cloud Private
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_private:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 20
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Private IBM Cloud Private is affected by 20 known vulnerabilities: 3 high, 13 medium, 4 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59970 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2021-39031		 CWE-90 Medium
No
No
 3.2.1.2203, 3.2.2.2203 25.01.2022 SB2022012506
SB2022032317
SB2022041207
and 12 more
#VU59042 - Resource exhaustion
CVE-2021-44717		 CWE-400 Medium
No
No
 3.2.1.2203, 3.2.2.2203 16.12.2021 SB2021121610
SB2021121646
SB2022031628
and 32 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Available
Exploited
 - 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU58824 - Improper input validation
CVE-2021-44716		 CWE-20 Medium
No
No
 3.2.1.2203, 3.2.2.2203 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU56829 - Improper input validation
CVE-2021-29923		 CWE-20 Medium
No
No
 3.2.1.2203, 3.2.2.2203 22.09.2021 SB2021092225
SB2021092226
SB2021100408
and 37 more
#VU56610 - Double Free
CVE-2021-22945		 CWE-415 Low
No
No
 3.2.1.2203, 3.2.2.2203 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 20 more
#VU56064 - Out-of-bounds read
CVE-2021-3712		 CWE-125 Medium
No
No
 3.2.1.2203, 3.2.2.2203 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 142 more
#VU55147 - Improper Certificate Validation
CVE-2021-22926		 CWE-295 Medium
No
No
 3.2.1.2203, 3.2.2.2203 21.07.2021 SB2021072108
SB2021072162
SB2021072814
and 11 more
#VU55146 - Improper Certificate Validation
CVE-2021-22924		 CWE-295 Medium
No
No
 3.2.1.2203, 3.2.2.2203 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 33 more
#VU55056 - Improper input validation
CVE-2021-29921		 CWE-20 High
No
No
 3.2.1.2203, 3.2.2.2203 20.07.2021 SB2021072055
SB2022012735
SB2022042261
and 15 more
#VU53616 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-20492		 CWE-611 Medium
No
No
 3.2.1.2203, 3.2.2.2203 27.05.2021 SB2021052715
SB2022012444
SB2022042567
and 4 more
#VU53436 - Exposure of sensitive information to an unauthorized actor
CVE-2021-25737		 CWE-200 Low
No
No
 3.2.1.2203, 3.2.2.2203 24.05.2021 SB2021052409
SB2021060911
SB2021090126
and 4 more
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 - 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more
#VU51713 - Improper Certificate Validation
CVE-2021-22138		 CWE-295 Medium
No
No
 - 25.03.2021 SB2021032501
SB2022010520
#VU47105 - Deserialization of Untrusted Data
CVE-2020-24750		 CWE-502 High
Available
No
 - 17.09.2020 SB2020092506
SB2020100512
SB2021012013
and 28 more
#VU17476 - Heap-based Buffer Overflow
CVE-2019-7401		 CWE-122 Medium
No
No
 3.2.1.2203, 3.2.2.2203 12.02.2019 SB2019021203
SB2022042571
#VU16023 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1841		 CWE-200 Low
No
No
 3.1.0 13.11.2018 SB2018112213
#VU15745 - Resource Management Errors
CVE-2018-16843		 CWE-399 Medium
No
No
 3.2.1.2203, 3.2.2.2203 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 9 more
#VU15744 - Resource Management Errors
CVE-2018-16844		 CWE-399 Medium
No
No
 3.2.1.2203, 3.2.2.2203 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 9 more
#VU15743 - Out-of-bounds read
CVE-2018-16845		 CWE-125 Medium
No
No
 3.2.1.2203, 3.2.2.2203 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 11 more