Advisories · Technology

IBM Cloud Pak for Data.

Every CVE that names IBM Cloud Pak for Data among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-14754 CVE record

CVSS 8.8 High

IBM Cloud Pak for Data is vulnerable to OS command injection
- IBM Cloud Pak for Data
- Command injection
Not analysed yet 18 Sept 2026
CVE-2025-14753 CVE record

CVSS 7.5 High

IBM Cloud Pak for Data is vulnerable to path traversal
- IBM Cloud Pak for Data
- Path traversal
Not analysed yet 18 Sept 2026
CVE-2025-0719 CVE record

CVSS 6.1 Medium

IBM Cloud Pak for Data cross-site scripting
- IBM Cloud Pak for Data
- Cross-site scripting (XSS)
Not analysed yet 26 Feb 2025
CVE-2022-36769 CVE record

CVSS 7.2 High

IBM Cloud Pak for Data file upload
- IBM Cloud Pak for Data
- Command injection
Not analysed yet 26 Apr 2023
CVE-2021-38899 CVE record

CVSS 4.4 Medium

IBM Cloud Pak for Data: IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain…
- IBM Cloud Pak for Data
Not analysed yet 20 Sept 2021
CVE-2021-20486 CVE record

CVSS 5.3 Medium

IBM Cloud Pak for Data: IBM Cloud Pak for Data 3.0 could allow an authenticated user to obtain sensitive…
- IBM Cloud Pak for Data
Not analysed yet 26 May 2021