| CVE-2023-38375 |
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting
|
6.1
Medium
|
Oct 19, 2026 |
| CVE-2026-3161 |
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an…
|
5.9
Medium
|
Oct 19, 2026 |
| CVE-2026-3295 |
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting
|
7.4
High
|
Oct 19, 2026 |
| CVE-2026-4418 |
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection
|
5.4
Medium
|
Oct 19, 2026 |
| CVE-2026-13463 |
IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of…
|
7.5
High
|
Jul 28, 2026 |
| CVE-2023-38005 |
IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could allow an authenticated user to perform…
|
4.3
Medium
|
Feb 17, 2026 |
| CVE-2023-38265 |
IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an…
|
5.3
Medium
|
Feb 17, 2026 |
| CVE-2023-38281 |
IBM Cloud Pak System does not set the secure attribute on authorization tokens or session cookies
|
5.3
Medium
|
Feb 4, 2026 |
| CVE-2023-38017 |
IBM Cloud Pak System is vulnerable to cross-site scripting
|
5.3
Medium
|
Feb 4, 2026 |
| CVE-2023-38010 |
IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the…
|
5.3
Medium
|
Feb 4, 2026 |
| CVE-2025-2895 |
IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, 2.3.4.1, and 2.3.4.1 iFix1 is vulnerable to…
|
5.4
Medium
|
Jun 30, 2025 |
| CVE-2023-38007 |
IBM Cloud Pak System 2.3.5.0, 2.3.3.7, 2.3.3.7 iFix1 on Power and 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.4.0,…
|
5.4
Medium
|
Jun 27, 2025 |
| CVE-2023-38272 |
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7,…
|
5.9
Medium
|
Mar 27, 2025 |
| CVE-2023-37405 |
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7,…
|
6.5
Medium
|
Mar 27, 2025 |
| CVE-2023-38271 |
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2,…
|
4.3
Medium
|
Jan 25, 2025 |
| CVE-2023-38713 |
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2,…
|
5.3
Medium
|
Jan 25, 2025 |
| CVE-2023-38714 |
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2,…
|
5.3
Medium
|
Jan 25, 2025 |
| CVE-2023-38013 |
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2,…
|
5.3
Medium
|
Jan 25, 2025 |
| CVE-2023-38012 |
IBM Cloud Pak System 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could allow a remote…
|
5.3
Medium
|
Jan 25, 2025 |
| CVE-2023-38716 |
IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could disclose…
|
5.3
Medium
|
Jan 25, 2025 |
| CVE-2023-38273 |
IBM Cloud Pak System 2.3.1.1, 2.3.2.0, and 2.3.3.7 uses an inadequate account lockout setting that could allow a…
|
7.5
High
|
Feb 2, 2024 |
| CVE-2021-20479 |
IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could…
|
5.9
Medium
|
May 9, 2022 |
| CVE-2021-20478 |
IBM Cloud Pak System 2.3 could allow a local user in some situations to view the artifacts of another user in self…
|
4.0
Medium
|
Jul 20, 2021 |
| CVE-2020-4919 |
IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to…
|
4.7
Medium
|
Jan 4, 2021 |
| CVE-2020-4928 |
IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files
|
6.7
Medium
|
Jan 4, 2021 |