Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

IBM Cloud Pak System

40 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2023-383752.3.6.0 ; 2.3.6.1IBM Cloud Pak System Cross-Site ScriptingMEDIUM 6.10.2 %
CVE-2026-31612.3.6.0 ; 2.3.6.1IBM Cloud Pak System Risky Cryptographic AlgorithmMEDIUM 5.90.2 %
CVE-2026-32952.3.6.0 ; 2.3.6.1IBM Cloud Pak System Cross-Site ScriptingHIGH 7.40.2 %
CVE-2026-44182.3.6.0 ; 2.3.6.1IBM Cloud Pak System HTML InjectionMEDIUM 5.40.2 %
CVE-2026-134632.3.5.0Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability []HIGH 7.50.4 %
CVE-2023-380052.3.3.6 – 2.1.0 ; 2.3.3.7 ; 2.3.4.0 ; …Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]MEDIUM 4.30.2 %
CVE-2023-382652.3.3.6 – 2.1.0 ; 2.3.3.7 ; 2.3.4.0 ; …Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]MEDIUM 5.30.2 %
CVE-2023-382812.3.4.0 ; 2.3.4.1 ; 2.3.4.1 Interim Fix 001 ; …Multiple Vulnerabilities in IBM Cloud Pak SystemMEDIUM 5.30.3 %
CVE-2023-380172.3.4.0 ; 2.3.4.1 ; 2.3.4.1 Interim Fix 001 ; …Multiple Vulnerabilities in IBM Cloud Pak SystemMEDIUM 5.30.3 %
CVE-2023-380102.3.4.0 ; 2.3.4.1 ; 2.3.4.1 Interim Fix 001 ; …Multiple Vulnerabilities in IBM Cloud Pak SystemHIGH 7.50.3 %
CVE-2025-28952.3.3.6 – 2.3.36 iFix1 ; 2.3.3.7 – 2.3.3.7 iFix1 ; 2.3.4.0 ; …IBM Cloud Pak System HTML injectionMEDIUM 5.40.3 %
CVE-2023-380072.3.5.0 ; 2.3.3.7 ; 2.3.3.7 iFix1IBM Cloud Pak System HTML injectionMEDIUM 5.40.3 %
CVE-2023-382722.3.3.0 ; 2.3.3.3 ; 2.3.3.3 iFix1 ; …IBM Cloud Pak System information disclosureHIGH 7.50.4 %
CVE-2023-374052.3.3.0 ; 2.3.3.3 ; 2.3.3.3 iFix1 ; …IBM Cloud Pak System information disclosureMEDIUM 6.50.2 %
CVE-2023-382712.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1IBM Cloud Pak System information disclosureMEDIUM 6.50.3 %
CVE-2023-387132.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1IBM Cloud Pak System information disclosureHIGH 7.50.3 %
CVE-2023-387142.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1IBM Cloud Pak System information disclosureHIGH 7.50.3 %
CVE-2023-380132.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1IBM Cloud Pak System information disclosureHIGH 7.50.3 %
CVE-2023-380122.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0IBM Cloud Pak System directory traversalMEDIUM 5.30.5 %
CVE-2023-387162.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0IBM Cloud Pak System information disclosureHIGH 7.50.3 %
CVE-2023-382732.3.1.1, 2.3.2.0, 2.3.3.7IBM Cloud Pak System information disclosureHIGH 7.50.7 %
CVE-2021-204792.3.0 ; 2.3.3.3.Interim.Fix1IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could allow an attacker to HIGH 7.50.7 %
CVE-2021-204782.3IBM Cloud Pak System 2.3 could allow a local user in some situations to view the artifacts of another user in self service console. IBM X-FoMEDIUM 4.00.2 %
CVE-2020-49282.3IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files. By intercepting the request and modifying the fiMEDIUM 6.70.4 %
CVE-2020-49192.3IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to impersonate another user on MEDIUM 4.70.6 %
CVE-2020-49182.3IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference inMEDIUM 4.40.3 %
CVE-2020-49172.3IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actHIGH 8.80.4 %
CVE-2020-49162.3IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the WeMEDIUM 5.50.7 %
CVE-2020-49132.3IBM Cloud Pak System 2.3 could reveal credential information in the HTTP response to a local privileged user. IBM X-Force ID: 191288.MEDIUM 4.40.3 %
CVE-2020-49122.3IBM Cloud Pak System 2.3 Self Service Console could allow a privilege escalation by capturing the user request URL when logged in as a priviHIGH 7.21.1 %
CVE-2020-49102.3IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the WeMEDIUM 4.80.6 %
CVE-2020-49092.3IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the WeMEDIUM 4.80.6 %
CVE-2019-45212.3Platform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary coCRITICAL 9.82.6 %
CVE-2019-40952.3IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actMEDIUM 5.30.4 %
CVE-2019-44682.3 ; 2.2IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript coMEDIUM 5.40.6 %
CVE-2019-44672.3 ; 2.2IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript coMEDIUM 5.40.6 %
CVE-2019-44652.3 ; 2.2IBM Cloud Pak System 2.3 and 2.3.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: MEDIUM 4.00.3 %
CVE-2019-42262.3 ; 2.2IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript coMEDIUM 5.40.6 %
CVE-2019-41302.3 ; 2.2IBM Cloud Pak System 2.3 and 2.3.0.1 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbiCRITICAL 9.02.0 %
CVE-2019-40982.3 ; 2.3.0.1IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript coMEDIUM 5.40.6 %