Ibm

Cloud Pak System

34 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2023-38281

  • EPSS -
  • Veröffentlicht 04.02.2026 20:45:05
  • Zuletzt bearbeitet 04.02.2026 21:15:56

IBM Cloud Pak System does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will...

5.3

CVE-2023-38017

  • EPSS -
  • Veröffentlicht 04.02.2026 20:44:04
  • Zuletzt bearbeitet 04.02.2026 21:15:56

IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessi...

5.3

CVE-2023-38010

  • EPSS -
  • Veröffentlicht 04.02.2026 20:24:56
  • Zuletzt bearbeitet 04.02.2026 21:15:55

IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the system.

5.4

CVE-2025-2895

  • EPSS 0.02%
  • Veröffentlicht 30.06.2025 14:39:43
  • Zuletzt bearbeitet 14.08.2025 01:07:15

IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, 2.3.4.1, and 2.3.4.1 iFix1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web brow...

5.4

CVE-2023-38007

  • EPSS 0.02%
  • Veröffentlicht 27.06.2025 14:48:28
  • Zuletzt bearbeitet 14.08.2025 01:12:31

IBM Cloud Pak System 2.3.5.0, 2.3.3.7, 2.3.3.7 iFix1 on Power and 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.4.0, 2.3.4.1 on Intel operating systems is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewe...

7.5

CVE-2023-38272

  • EPSS 0.17%
  • Veröffentlicht 27.03.2025 17:21:08
  • Zuletzt bearbeitet 18.08.2025 12:46:11

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user with access to the network to obtain sensitive information from CLI argume...

6.5

CVE-2023-37405

  • EPSS 0.11%
  • Veröffentlicht 27.03.2025 17:20:04
  • Zuletzt bearbeitet 18.08.2025 18:46:32

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 stores sensitive data in memory, that could be obtained by an unauthorized user.

7.5

CVE-2023-38716

  • EPSS 0.11%
  • Veröffentlicht 25.01.2025 14:15:28
  • Zuletzt bearbeitet 13.08.2025 17:52:45

IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could disclose sensitive information about the system that could aid in further attacks against the system.

6.5

CVE-2023-38271

  • EPSS 0.13%
  • Veröffentlicht 25.01.2025 14:15:28
  • Zuletzt bearbeitet 13.08.2025 17:59:56

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could allow an authenticated user to obtain sensitive information from log files.

7.5

CVE-2023-38713

  • EPSS 0.11%
  • Veröffentlicht 25.01.2025 14:15:28
  • Zuletzt bearbeitet 13.08.2025 17:56:44

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could disclose sensitive information about the system that could aid in further attacks against the system.