| CVE-2021-39089 |
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.6.0 could allow an authenticated user to obtain sensitive…
|
4.3
Medium
|
Jan 20, 2023 |
| CVE-2021-39011 |
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.6.0 stores potentially sensitive information in log files that…
|
4.2
Medium
|
Jan 20, 2023 |
| CVE-2022-36776 |
IBM Cloud Pak for Security (CP4S) 1.10.0.0 79and 1.10.2.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Nov 11, 2022 |
| CVE-2022-38385 |
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive…
|
7.1
High
|
Nov 11, 2022 |
| CVE-2022-38387 |
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute…
|
7.1
High
|
Nov 11, 2022 |
| CVE-2021-39013 |
IBM Cloud Pak for Security (CP4S) 1.7.2.0, 1.7.1.0, and 1.7.0.0 could allow an authenticated user to obtain sensitive…
|
4.3
Medium
|
Dec 22, 2021 |
| CVE-2021-38911 |
IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an…
|
4.4
Medium
|
Oct 19, 2021 |
| CVE-2021-29912 |
IBM Security Risk Manager on CP4S 1.7.0.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Oct 19, 2021 |
| CVE-2021-29894 |
IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic…
|
5.9
Medium
|
Sep 30, 2021 |
| CVE-2021-20578 |
IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized…
|
5.4
Medium
|
Sep 30, 2021 |
| CVE-2021-29697 |
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote…
|
4.9
Medium
|
Aug 2, 2021 |
| CVE-2021-29696 |
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote…
|
8.0
High
|
Aug 2, 2021 |
| CVE-2021-20541 |
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive…
|
3.7
Low
|
Aug 2, 2021 |
| CVE-2021-20540 |
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive…
|
2.7
Low
|
Aug 2, 2021 |
| CVE-2021-20539 |
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive…
|
5.3
Medium
|
Aug 2, 2021 |
| CVE-2021-20565 |
IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that…
|
4.6
Medium
|
May 14, 2021 |
| CVE-2021-20564 |
IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a remote attacker to…
|
5.9
Medium
|
May 14, 2021 |
| CVE-2020-4811 |
IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to…
|
2.4
Low
|
May 14, 2021 |
| CVE-2021-20577 |
IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 is vulnerable to cross-site scripting
|
4.3
Medium
|
May 10, 2021 |
| CVE-2021-20538 |
IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive information or perform…
|
4.8
Medium
|
May 10, 2021 |
| CVE-2020-4967 |
IBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through HTTP headers which could be…
|
3.1
Low
|
Jan 27, 2021 |
| CVE-2020-4820 |
IBM Cloud Pak for Security (CP4S) 1.4.0.0 is vulnerable to cross-site scripting
|
6.1
Medium
|
Jan 27, 2021 |
| CVE-2020-4816 |
IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote attacker to obtain sensitive information, caused by the…
|
5.3
Medium
|
Jan 27, 2021 |
| CVE-2020-4815 |
IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote user to obtain sensitive information from HTTP response…
|
5.3
Medium
|
Jan 27, 2021 |
| CVE-2020-4628 |
IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when…
|
5.3
Medium
|
Jan 27, 2021 |