| CVE-2023-38375 |
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting
|
6.1
Moyenne
|
19 oct. 2026 |
| CVE-2026-3161 |
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an…
|
5.9
Moyenne
|
19 oct. 2026 |
| CVE-2026-3295 |
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting
|
7.4
Élevée
|
19 oct. 2026 |
| CVE-2026-4418 |
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection
|
5.4
Moyenne
|
19 oct. 2026 |
| CVE-2026-13463 |
IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of…
|
7.5
Élevée
|
28 juil. 2026 |
| CVE-2023-38005 |
IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could allow an authenticated user to perform…
|
4.3
Moyenne
|
17 févr. 2026 |
| CVE-2023-38265 |
IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an…
|
5.3
Moyenne
|
17 févr. 2026 |
| CVE-2023-38281 |
IBM Cloud Pak System does not set the secure attribute on authorization tokens or session cookies
|
5.3
Moyenne
|
4 févr. 2026 |
| CVE-2023-38017 |
IBM Cloud Pak System is vulnerable to cross-site scripting
|
5.3
Moyenne
|
4 févr. 2026 |
| CVE-2023-38010 |
IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the…
|
5.3
Moyenne
|
4 févr. 2026 |
| CVE-2025-2895 |
IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, 2.3.4.1, and 2.3.4.1 iFix1 is vulnerable to…
|
5.4
Moyenne
|
30 juin 2025 |
| CVE-2023-38007 |
IBM Cloud Pak System 2.3.5.0, 2.3.3.7, 2.3.3.7 iFix1 on Power and 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.4.0,…
|
5.4
Moyenne
|
27 juin 2025 |
| CVE-2023-38272 |
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7,…
|
5.9
Moyenne
|
27 mars 2025 |
| CVE-2023-37405 |
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7,…
|
6.5
Moyenne
|
27 mars 2025 |
| CVE-2023-38271 |
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2,…
|
4.3
Moyenne
|
25 janv. 2025 |
| CVE-2023-38713 |
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2,…
|
5.3
Moyenne
|
25 janv. 2025 |
| CVE-2023-38714 |
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2,…
|
5.3
Moyenne
|
25 janv. 2025 |
| CVE-2023-38013 |
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2,…
|
5.3
Moyenne
|
25 janv. 2025 |
| CVE-2023-38012 |
IBM Cloud Pak System 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could allow a remote…
|
5.3
Moyenne
|
25 janv. 2025 |
| CVE-2023-38716 |
IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could disclose…
|
5.3
Moyenne
|
25 janv. 2025 |
| CVE-2023-38273 |
IBM Cloud Pak System 2.3.1.1, 2.3.2.0, and 2.3.3.7 uses an inadequate account lockout setting that could allow a…
|
7.5
Élevée
|
2 févr. 2024 |
| CVE-2021-20479 |
IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could…
|
5.9
Moyenne
|
9 mai 2022 |
| CVE-2021-20478 |
IBM Cloud Pak System 2.3 could allow a local user in some situations to view the artifacts of another user in self…
|
4.0
Moyenne
|
20 juil. 2021 |
| CVE-2020-4919 |
IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to…
|
4.7
Moyenne
|
4 janv. 2021 |
| CVE-2020-4928 |
IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files
|
6.7
Moyenne
|
4 janv. 2021 |