CP
Product
Cloud Pak System
41
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 1High 13Medium 24Low 3
Watch
Add Cloud Pak System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-4917 | 8.8 | Jan 4 | IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the… Affected: 2.3.0.0 before 2.3.3.3 |
| CVE-2019-4130 | 8.8 | Dec 3 | IBM Cloud Pak System 2.3 and 2.3.0.1 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server Affected: 2.3; 2.3.0.1 |
| CVE-2026-13463 | 7.5 | Jul 28 | Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability [] Affected: 2.3.5.0 |
| CVE-2023-38010 | 7.5 | Feb 4 | Multiple Vulnerabilities in IBM Cloud Pak System Affected: 2.3.4.0; 2.3.4.1; 2.3.4.1 Interim Fix 001; 2.3.5.0; 2.3.6.0 |
| CVE-2023-38272 | 7.5 | Mar 27 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user… Affected: 2.3.1.1; 2.3.3.0; 2.3.3.3; 2.3.3.3; 2.3.3.4; 2.3.3.5; +7 more |
| CVE-2023-38716 | 7.5 | Jan 25 | IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could disclose sensitive information about the system that could aid in further… Affected: 2.3.3.6; 2.3.3.6; 2.3.3.6; 2.3.3.7; 2.3.3.7; 2.3.4.0 |
| CVE-2023-38714 | 7.5 | Jan 25 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could disclose sensitive information… Affected: 2.3.3.0; 2.3.3.3; 2.3.3.3; 2.3.3.4; 2.3.3.5; 2.3.3.6; +4 more |
| CVE-2023-38713 | 7.5 | Jan 25 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could disclose sensitive information… Affected: 2.3.0.0; 2.3.3.0; 2.3.3.3; 2.3.3.3; 2.3.3.4; 2.3.3.5; +5 more |
| CVE-2023-38013 | 7.5 | Jan 25 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could disclose sensitive information in… Affected: 2.3.3.0; 2.3.3.3; 2.3.3.3; 2.3.3.4; 2.3.3.5; 2.3.3.6; +4 more |
| CVE-2023-38273 | 7.5 | Feb 2 | IBM Cloud Pak System 2.3.1.1, 2.3.2.0, and 2.3.3.7 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials Affected: 2.3.3.0 through 2.3.3.6; 2.3.1.1; 2.3.2.0; 2.3.3.7 |
| CVE-2021-20479 | 7.5 | May 9 | IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 2.3.0.0 before 2.3.3.4 |
| CVE-2026-3295 | 7.4 | Oct 19 | IBM Cloud Pak System Cross-Site Scripting Affected: 2.3.6.0; 2.3.6.1 |
| CVE-2020-4912 | 7.2 | Jan 4 | IBM Cloud Pak System 2.3 Self Service Console could allow a privilege escalation by capturing the user request URL when logged in as a privileged user Affected: 2.3.0.0 before 2.3.3.3 |
Showing 13