5.3
Medium
CVE-2023-38017 IBM Cloud Pak System is vulnerable to cross-site scripting
Description
IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cloud Pak System 2.3 | 2.3.4.0 → 2.3.6.0 | No fix stated |
| OS Image for Red Hat Linux Systems 5.0 | 5.0.0.0 → 5.0.1.0 | No fix stated |
| OS Image for Red Hat Linux Systems 4.0 | 4.0.4.0 → 4.0.7.0 | No fix stated |
Other CVEs of Cloud Pak System
The 40 CVEs of Cloud Pak System →
CVE-2023-38375
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting
6.1
Medium
CVE-2026-3161
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an…
5.9
Medium
CVE-2026-3295
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting
7.4
High
CVE-2026-4418
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection
5.4
Medium