Login Request a demo
CP
Product
Cloud Pak for Security
by IBM · last CVE Jun 3, 2025
53
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities53In the news0Timeline
Severity mix
Critical 3High 9Medium 39Low 2
Severity
All severities53Critical3High9Medium39Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cloud Pak for Security to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-20578
9.8
1%
Sep 30
IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized actions due to improper or missing authentication controls
Affected: 1.7.0.0; 1.7.1.0; 1.7.2.0
CVE-2021-20538
9.1
1%
May 10
IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive information or perform actions they should not have access to due to incorrect…
Affected: 1.5.0.0; 1.5.0.1
CVE-2020-4627
9.0
2%
Nov 30
IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection
Affected: 1.3.0.1
CVE-2025-25022
8.8
0%
Jun 3
IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure
Affected: 1.10.0.0 through 1.10.11.0
CVE-2023-47726
8.8
0%
Jun 18
IBM QRadar Suite improper input validation
Affected: 1.10.12.0 through 1.10.21.0
CVE-2022-38387
8.8
1%
Nov 11
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted…
Affected: 1.10.0.0 before 1.10.2.0
CVE-2022-38385
8.1
1%
Nov 11
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to…
Affected: 1.10.0.0 before 1.10.2.0
CVE-2024-28799
7.5
0%
Aug 14
IBM QRadar Suite Software information disclosure
Affected: 1.10.0.0 through 1.10.11.0
CVE-2023-30993
7.5
1%
Jun 27
IBM Cloud Pak for Security information disclosure
Affected: 1.9.0.0 through 1.9.2.0
CVE-2021-29894
7.5
1%
Sep 30
IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
Affected: 1.7.0.0; 1.7.1.0; 1.7.2.0
CVE-2025-25021
7.2
1%
Jun 3
IBM QRadar Suite Software and IBM Cloud Pak for Security code injection
Affected: 1.10.0.0 through 1.10.11.0
CVE-2021-29696
7.2
3%
Aug 2
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to execute arbitrary commands on the system…
Affected: 1.5.0.0; 1.5.0.1; 1.6.0.0; 1.6.1.0; 1.7.0.0; 1.7.1.0
CVE-2025-25020
6.5
0%
Jun 3
IBM QRadar Suite Software and IBM Cloud Pak for Security improper input validation
Affected: 1.10.0.0 through 1.10.11.0
CVE-2025-25019
6.5
0%
Jun 3
IBM QRadar Suite Software and IBM Cloud Pak for Security session fixation
Affected: 1.10.0.0 through 1.10.11.0
CVE-2023-47728
6.5
0%
Aug 16
IBM QRadar Suite Software information disclosure
Affected: 1.10.0.0 through 1.10.11.0
CVE-2024-28782
6.5
0%
Apr 3
IBM QRadar Suite Software information disclosure
Affected: 1.10.0.0 through 1.10.11.0
CVE-2022-36777
6.5
1%
Nov 22
IBM Cloud Pak for Security information disclosure
Affected: 1.10.0.0 through 1.10.11.0
CVE-2021-39089
6.5
1%
Jan 20
IBM Cloud Pak for Security information disclosure
Affected: 1.10.0.0 before 1.10.6.0
CVE-2021-39013
6.5
1%
Dec 22
IBM Cloud Pak for Security (CP4S) 1.7.2.0, 1.7.1.0, and 1.7.0.0 could allow an authenticated user to obtain sensitive information in HTTP responses that could be used in further…
Affected: 1.7.0.0; 1.7.1.0; 1.7.2.0
CVE-2021-20577
6.1
1%
May 10
IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 is vulnerable to cross-site scripting
Affected: 1.5.0.0; 1.5.0.1
CVE-2020-4820
6.1
1%
Jan 27
IBM Cloud Pak for Security (CP4S) 1.4.0.0 is vulnerable to cross-site scripting
Affected: 1.4.0.0
CVE-2022-38386
5.9
0%
May 1
IBM Cloud Pak for Security information disclosure
Affected: 1.10.0.0 through 1.10.11.0
CVE-2024-22355
5.9
0%
Mar 3
IBM QRadar Suite information dislosure
Affected: 1.10.0.0 through 1.10.11.0
CVE-2023-47742
5.9
0%
Mar 3
IBM QRadar Suite information dislosure
Affected: 1.10.0.0 through 1.10.11.0
CVE-2021-39090
5.9
0%
Feb 29
IBM Cloud Pak for Security information disclosure
Affected: 1.10.0.0 through 1.10.6.0
CVE-2021-20564
5.9
1%
May 14
IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly…
Affected: 1.4.0.0; 1.5.0.0; 1.5.0.1; 1.6.0.0; 1.6.0.1
CVE-2020-4816
5.9
1%
Jan 27
IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security
Affected: 1.4.0.0
CVE-2024-25024
5.5
0%
Aug 15
IBM QRadar Suite Software information disclosure
Affected: 1.10.0.0 through 1.10.11.0
CVE-2024-25023
5.5
0%
Jul 9
IBM QRadar Suite Software information disclosure
Affected: 1.10.0.0 through 1.10.11.0
CVE-2024-22337
5.5
0%
Feb 17
IBM QRadar Suite information disclosure
Affected: 1.10.0.0 through 1.10.11.0
CVE-2024-22336
5.5
0%
Feb 17
IBM QRadar Suite information disclosure
Affected: 1.10.0.0 through 1.10.11.0
CVE-2024-22335
5.5
0%
Feb 17
IBM QRadar Suite information disclosure
Affected: 1.10.0.0 through 1.10.11.0
CVE-2023-47731
5.4
0%
Apr 23
IBM QRadar Suite Software cross-site scripting
Affected: 1.10.0.0 through 1.10.11.0
CVE-2022-36776
5.4
0%
Nov 11
IBM Cloud Pak for Security (CP4S) 1.10.0.0 79and 1.10.2.0 is vulnerable to cross-site scripting
Affected: 1.10.0.0, 1.10.2.0
CVE-2021-20541
5.3
1%
Aug 2
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests
Affected: 1.5.0.0; 1.5.1.0; 1.6.0.0; 1.6.1.0; 1.7.0.0; 1.7.1.0
CVE-2021-20540
5.3
1%
Aug 2
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests
Affected: 1.5.0.0; 1.5.1.0; 1.6.0.0; 1.6.1.0; 1.7.0.0; 1.7.1.0
CVE-2021-20539
5.3
1%
Aug 2
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests
Affected: 1.5.0.0; 1.5.1.0; 1.6.0.0; 1.6.1.0; 1.7.0.0; 1.7.1.0
CVE-2021-20565
5.3
1%
May 14
IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence or values of an input, but the input can…
Affected: 1.4.0.0; 1.5.0.0; 1.5.0.1; 1.6.0.0; 1.6.0.1
CVE-2020-4815
5.3
1%
Jan 27
IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote user to obtain sensitive information from HTTP response headers that could be used in further attacks against the…
Affected: 1.4.0.0
CVE-2020-4628
5.3
1%
Jan 27
IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…
Affected: 1.3.0.1; 1.4.0.0
CVE-2020-4625
5.3
1%
Nov 30
IBM Cloud Pak for Security 1.3.0.1(CP4S) could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag
Affected: 1.3.0.1
CVE-2020-4624
5.3
1%
Nov 30
IBM Cloud Pak for Security 1.3.0.1 (CP4S) uses weaker than expected cryptographic algorithms during negotiation could allow an attacker to decrypt sensitive information
Affected: 1.3.0.1
CVE-2021-39011
4.9
1%
Jan 20
IBM Cloud Pak for Security information disclosure
Affected: 1.10.0.0 before 1.10.6.0
CVE-2021-29697
4.9
1%
Aug 2
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to obtain sensitive information through HTTP…
Affected: 1.5.0.0; 1.5.0.1; 1.6.0.0; 1.6.1.0; 1.7.0.0; 1.7.1.0
CVE-2023-47727
4.3
0%
May 2
IBM QRadar Suite Software file manipulation
Affected: 1.10.0.0 through 1.10.11.0
CVE-2023-50951
4.3
0%
Feb 17
IBM QRadar Suite information disclosure
Affected: 1.10.0.0 through 1.10.11.0
CVE-2020-4967
4.3
1%
Jan 27
IBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through HTTP headers which could be used in further attacks against the system
Affected: 1.3.0.1
CVE-2020-4696
4.3
1%
Nov 30
IBM Cloud Pak for Security 1.3.0.1(CP4S) does not invalidate session after logout which could allow an authenticated user to obtain sensitive information from the previous session
Affected: 1.3.0.1
CVE-2020-4626
4.3
1%
Nov 30
IBM Cloud Pak for Security 1.3.0.1 (CP4S) could reveal sensitive information about the internal network to an authenticated user using a specially crafted HTTP request
Affected: 1.3.0.1
CVE-2022-38382
4.1
0%
Aug 13
IBM Cloud Pak for Security session fixation
Affected: 1.10.0.0 through 1.10.11.0
Page 1 of 2 · 53 total
12