# IBM Cloud Pak for Security. Every CVE that names IBM Cloud Pak for Security among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [IBM QRadar Suite Software and IBM Cloud Pak for Security improper input validation](https://agentprime.io/advisories/CVE-2025-25020.md) `CVE-2025-25020` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Jun 2025 · Tags: CWE-1287 - [IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure](https://agentprime.io/advisories/CVE-2025-1334.md) `CVE-2025-1334` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 4.0 Medium · Not analysed yet · Published 3 Jun 2025 · Tags: CWE-525 - [IBM QRadar Suite Software and IBM Cloud Pak for Security code injection](https://agentprime.io/advisories/CVE-2025-25021.md) `CVE-2025-25021` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 7.2 High · Not analysed yet · Published 3 Jun 2025 · Tags: Code injection - [IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure](https://agentprime.io/advisories/CVE-2025-25022.md) `CVE-2025-25022` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Jun 2025 · Tags: CWE-260 - [IBM QRadar Suite Software and IBM Cloud Pak for Security session fixation](https://agentprime.io/advisories/CVE-2025-25019.md) `CVE-2025-25019` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 3 Jun 2025 · Tags: Authentication bypass - [IBM QRadar Suite Software information disclosure](https://agentprime.io/advisories/CVE-2023-47728.md) `CVE-2023-47728` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Aug 2024 · Tags: Information disclosure - [IBM QRadar Suite Software information disclosure](https://agentprime.io/advisories/CVE-2024-25024.md) `CVE-2024-25024` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Aug 2024 · Tags: CWE-256 - [IBM QRadar Suite Software information disclosure](https://agentprime.io/advisories/CVE-2024-28799.md) `CVE-2024-28799` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 5.6 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-214 - [IBM Cloud Pak for Security session fixation](https://agentprime.io/advisories/CVE-2022-38382.md) `CVE-2022-38382` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Aug 2024 · Tags: Authentication bypass - [IBM QRadar Suite Software information disclosure](https://agentprime.io/advisories/CVE-2024-25023.md) `CVE-2024-25023` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: Information disclosure - [IBM Cloud Pak for Security information disclosure](https://agentprime.io/advisories/CVE-2022-38383.md) `CVE-2022-38383` · CVE record: IBM Cloud Pak for Security and 1 more · CVSS 4.0 Medium · Not analysed yet · Published 28 Jun 2024 · Tags: CWE-525 - [IBM QRadar Suite improper input validation](https://agentprime.io/advisories/CVE-2023-47726.md) `CVE-2023-47726` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 7.1 High · Not analysed yet · Published 18 Jun 2024 · Tags: CWE-1287 - [IBM QRadar Suite Software file manipulation](https://agentprime.io/advisories/CVE-2023-47727.md) `CVE-2023-47727` · CVE record: IBM Cloud Pak for Security and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 2 May 2024 · Tags: CWE-1287 - [IBM Cloud Pak for Security information disclosure](https://agentprime.io/advisories/CVE-2022-38386.md) `CVE-2022-38386` · CVE record: IBM Cloud Pak for Security and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 1 May 2024 · Tags: CWE-1275 - [IBM QRadar Suite Software cross-site scripting](https://agentprime.io/advisories/CVE-2023-47731.md) `CVE-2023-47731` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 23 Apr 2024 · Tags: Cross-site scripting (XSS) - [IBM QRadar Suite Software information disclosure](https://agentprime.io/advisories/CVE-2024-28782.md) `CVE-2024-28782` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 3 Apr 2024 · Tags: CWE-256 - [IBM QRadar Suite information dislosure](https://agentprime.io/advisories/CVE-2024-22355.md) `CVE-2024-22355` · CVE record: IBM QRadar Suite Products and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Mar 2024 · Tags: Hard-coded credentials - [IBM QRadar Suite information dislosure](https://agentprime.io/advisories/CVE-2023-47742.md) `CVE-2023-47742` · CVE record: IBM QRadar Suite Products and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Mar 2024 · Tags: Weak cryptography or TLS - [IBM Cloud Pak for Security information disclosure](https://agentprime.io/advisories/CVE-2021-39090.md) `CVE-2021-39090` · CVE record: IBM Cloud Pak for Security · CVSS 5.9 Medium · Not analysed yet · Published 29 Feb 2024 · Tags: Weak cryptography or TLS - [IBM QRadar Suite information disclosure](https://agentprime.io/advisories/CVE-2023-50951.md) `CVE-2023-50951` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 4.0 Medium · Not analysed yet · Published 17 Feb 2024 · Tags: Information disclosure - [IBM QRadar Suite information disclosure](https://agentprime.io/advisories/CVE-2024-22337.md) `CVE-2024-22337` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 17 Feb 2024 · Tags: Information disclosure - [IBM QRadar Suite information disclosure](https://agentprime.io/advisories/CVE-2024-22336.md) `CVE-2024-22336` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 17 Feb 2024 · Tags: Information disclosure - [IBM QRadar Suite information disclosure](https://agentprime.io/advisories/CVE-2024-22335.md) `CVE-2024-22335` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 17 Feb 2024 · Tags: Information disclosure - [IBM Cloud Pak for Security information disclosure](https://agentprime.io/advisories/CVE-2022-36777.md) `CVE-2022-36777` · CVE record: IBM Cloud Pak for Security and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 22 Nov 2023 · Tags: Information disclosure - [IBM Cloud Pak for Security information disclosure](https://agentprime.io/advisories/CVE-2023-30993.md) `CVE-2023-30993` · CVE record: IBM Cloud Pak for Security · CVSS 6.8 Medium · Not analysed yet · Published 27 Jun 2023 · Tags: Information disclosure - [IBM Cloud Pak for Security information disclosure](https://agentprime.io/advisories/CVE-2021-39089.md) `CVE-2021-39089` · CVE record: IBM Cloud Pak for Security · CVSS 4.3 Medium · Not analysed yet · Published 20 Jan 2023 · Tags: Information disclosure - [IBM Cloud Pak for Security information disclosure](https://agentprime.io/advisories/CVE-2021-39011.md) `CVE-2021-39011` · CVE record: IBM Cloud Pak for Security · CVSS 4.2 Medium · Not analysed yet · Published 20 Jan 2023 · Tags: Information disclosure - [Cross-site scripting in IBM Cloud Pak for Security](https://agentprime.io/advisories/CVE-2022-36776.md) `CVE-2022-36776` · CVE record: IBM Cloud Pak for Security · CVSS 5.4 Medium · Not analysed yet · Published 11 Nov 2022 · Tags: Cross-site scripting (XSS) - [Improper input validation in IBM Cloud Pak for Security](https://agentprime.io/advisories/CVE-2022-38385.md) `CVE-2022-38385` · CVE record: IBM Cloud Pak for Security · CVSS 7.1 High · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-20 - [OS command injection in IBM Cloud Pak for Security](https://agentprime.io/advisories/CVE-2022-38387.md) `CVE-2022-38387` · CVE record: IBM Cloud Pak for Security · CVSS 7.1 High · Not analysed yet · Published 11 Nov 2022 · Tags: Command injection - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.7.2.0, 1.7.1.0…](https://agentprime.io/advisories/CVE-2021-39013.md) `CVE-2021-39013` · CVE record: IBM Cloud Pak for Security · CVSS 4.3 Medium · Not analysed yet · Published 22 Dec 2021 - [IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authenticatedl privileged user.](https://agentprime.io/advisories/CVE-2021-38911.md) `CVE-2021-38911` · CVE record: IBM Cloud Pak for Security · CVSS 4.4 Medium · Not analysed yet · Published 19 Oct 2021 - [IBM Security Risk Manager on CP4S 1.7.0.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-29912.md) `CVE-2021-29912` · CVE record: IBM Cloud Pak for Security · CVSS 5.4 Medium · Not analysed yet · Published 19 Oct 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0…](https://agentprime.io/advisories/CVE-2021-29894.md) `CVE-2021-29894` · CVE record: IBM Cloud Pak for Security · CVSS 5.9 Medium · Not analysed yet · Published 30 Sept 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0…](https://agentprime.io/advisories/CVE-2021-20578.md) `CVE-2021-20578` · CVE record: IBM Cloud Pak for Security · CVSS 5.4 Medium · Not analysed yet · Published 30 Sept 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0…](https://agentprime.io/advisories/CVE-2021-29697.md) `CVE-2021-29697` · CVE record: IBM Cloud Pak for Security · CVSS 4.9 Medium · Not analysed yet · Published 2 Aug 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0…](https://agentprime.io/advisories/CVE-2021-29696.md) `CVE-2021-29696` · CVE record: IBM Cloud Pak for Security · CVSS 8.0 High · Not analysed yet · Published 2 Aug 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0…](https://agentprime.io/advisories/CVE-2021-20541.md) `CVE-2021-20541` · CVE record: IBM Cloud Pak for Security · CVSS 3.7 Low · Not analysed yet · Published 2 Aug 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0…](https://agentprime.io/advisories/CVE-2021-20540.md) `CVE-2021-20540` · CVE record: IBM Cloud Pak for Security · CVSS 2.7 Low · Not analysed yet · Published 2 Aug 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0…](https://agentprime.io/advisories/CVE-2021-20539.md) `CVE-2021-20539` · CVE record: IBM Cloud Pak for Security · CVSS 5.3 Medium · Not analysed yet · Published 2 Aug 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0…](https://agentprime.io/advisories/CVE-2021-20565.md) `CVE-2021-20565` · CVE record: IBM Cloud Pak for Security · CVSS 4.6 Medium · Not analysed yet · Published 14 May 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0…](https://agentprime.io/advisories/CVE-2021-20564.md) `CVE-2021-20564` · CVE record: IBM Cloud Pak for Security · CVSS 5.9 Medium · Not analysed yet · Published 14 May 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0…](https://agentprime.io/advisories/CVE-2020-4811.md) `CVE-2020-4811` · CVE record: IBM Cloud Pak for Security · CVSS 2.4 Low · Not analysed yet · Published 14 May 2021 - [IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20577.md) `CVE-2021-20577` · CVE record: IBM Cloud Pak for Security · CVSS 4.3 Medium · Not analysed yet · Published 10 May 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain…](https://agentprime.io/advisories/CVE-2021-20538.md) `CVE-2021-20538` · CVE record: IBM Cloud Pak for Security · CVSS 4.8 Medium · Not analysed yet · Published 10 May 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through…](https://agentprime.io/advisories/CVE-2020-4967.md) `CVE-2020-4967` · CVE record: IBM Cloud Pak for Security · CVSS 3.1 Low · Not analysed yet · Published 27 Jan 2021 - [IBM Cloud Pak for Security (CP4S) 1.4.0.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4820.md) `CVE-2020-4820` · CVE record: IBM Cloud Pak for Security · CVSS 6.1 Medium · Not analysed yet · Published 27 Jan 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote attacker to obtain…](https://agentprime.io/advisories/CVE-2020-4816.md) `CVE-2020-4816` · CVE record: IBM Cloud Pak for Security · CVSS 5.3 Medium · Not analysed yet · Published 27 Jan 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote user to obtain sensitive…](https://agentprime.io/advisories/CVE-2020-4815.md) `CVE-2020-4815` · CVE record: IBM Cloud Pak for Security · CVSS 5.3 Medium · Not analysed yet · Published 27 Jan 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to…](https://agentprime.io/advisories/CVE-2020-4628.md) `CVE-2020-4628` · CVE record: IBM Cloud Pak for Security · CVSS 5.3 Medium · Not analysed yet · Published 27 Jan 2021 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security 1.3.0.1(CP4S) does not invalidate session after logout which…](https://agentprime.io/advisories/CVE-2020-4696.md) `CVE-2020-4696` · CVE record: IBM Cloud Pak for Security · CVSS 5.3 Medium · Not analysed yet · Published 30 Nov 2020 - [IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection.](https://agentprime.io/advisories/CVE-2020-4627.md) `CVE-2020-4627` · CVE record: IBM Cloud Pak for Security · CVSS 6.5 Medium · Not analysed yet · Published 30 Nov 2020 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security 1.3.0.1 (CP4S) could reveal sensitive information about the…](https://agentprime.io/advisories/CVE-2020-4626.md) `CVE-2020-4626` · CVE record: IBM Cloud Pak for Security · CVSS 5.0 Medium · Not analysed yet · Published 30 Nov 2020 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security 1.3.0.1(CP4S) could allow a remote attacker to obtain…](https://agentprime.io/advisories/CVE-2020-4625.md) `CVE-2020-4625` · CVE record: IBM Cloud Pak for Security · CVSS 4.0 Medium · Not analysed yet · Published 30 Nov 2020 - [IBM Cloud Pak for Security: IBM Cloud Pak for Security 1.3.0.1 (CP4S) uses weaker than expected cryptographic…](https://agentprime.io/advisories/CVE-2020-4624.md) `CVE-2020-4624` · CVE record: IBM Cloud Pak for Security · CVSS 3.7 Low · Not analysed yet · Published 30 Nov 2020 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .