Advisories · Technology

IBM Cloud Pak for Security.

Every CVE that names IBM Cloud Pak for Security among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-25020 CVE record

CVSS 6.5 Medium

IBM QRadar Suite Software and IBM Cloud Pak for Security improper input validation
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- CWE-1287
Not analysed yet 3 Jun 2025
CVE-2025-1334 CVE record

CVSS 4.0 Medium

IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- CWE-525
Not analysed yet 3 Jun 2025
CVE-2025-25021 CVE record

CVSS 7.2 High

IBM QRadar Suite Software and IBM Cloud Pak for Security code injection
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- Code injection
Not analysed yet 3 Jun 2025
CVE-2025-25022 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- CWE-260
Not analysed yet 3 Jun 2025
CVE-2025-25019 CVE record

CVSS 4.8 Medium

IBM QRadar Suite Software and IBM Cloud Pak for Security session fixation
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- Authentication bypass
Not analysed yet 3 Jun 2025
CVE-2023-47728 CVE record

CVSS 6.5 Medium

IBM QRadar Suite Software information disclosure
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- Information disclosure
Not analysed yet 16 Aug 2024
CVE-2024-25024 CVE record

CVSS 5.5 Medium

IBM QRadar Suite Software information disclosure
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- CWE-256
Not analysed yet 15 Aug 2024
CVE-2024-28799 CVE record

CVSS 5.6 Medium

IBM QRadar Suite Software information disclosure
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- CWE-214
Not analysed yet 14 Aug 2024
CVE-2022-38382 CVE record

CVSS 4.7 Medium

IBM Cloud Pak for Security session fixation
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- Authentication bypass
Not analysed yet 13 Aug 2024
CVE-2024-25023 CVE record

CVSS 5.5 Medium

IBM QRadar Suite Software information disclosure
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- Information disclosure
Not analysed yet 9 Jul 2024
CVE-2022-38383 CVE record

CVSS 4.0 Medium

IBM Cloud Pak for Security information disclosure
- IBM Cloud Pak for Security
- IBM QRadar Suite Software
- CWE-525
Not analysed yet 28 Jun 2024
CVE-2023-47726 CVE record

CVSS 7.1 High

IBM QRadar Suite improper input validation
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- CWE-1287
Not analysed yet 18 Jun 2024
CVE-2023-47727 CVE record

CVSS 4.3 Medium

IBM QRadar Suite Software file manipulation
- IBM Cloud Pak for Security
- IBM QRadar Suite Software
- CWE-1287
Not analysed yet 2 May 2024
CVE-2022-38386 CVE record

CVSS 5.9 Medium

IBM Cloud Pak for Security information disclosure
- IBM Cloud Pak for Security
- IBM QRadar Suite for Software
- CWE-1275
Not analysed yet 1 May 2024
CVE-2023-47731 CVE record

CVSS 5.4 Medium

IBM QRadar Suite Software cross-site scripting
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- Cross-site scripting (XSS)
Not analysed yet 23 Apr 2024
CVE-2024-28782 CVE record

CVSS 6.3 Medium

IBM QRadar Suite Software information disclosure
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- CWE-256
Not analysed yet 3 Apr 2024
CVE-2024-22355 CVE record

CVSS 5.9 Medium

IBM QRadar Suite information dislosure
- IBM QRadar Suite Products
- IBM Cloud Pak for Security
- Hard-coded credentials
Not analysed yet 3 Mar 2024
CVE-2023-47742 CVE record

CVSS 5.9 Medium

IBM QRadar Suite information dislosure
- IBM QRadar Suite Products
- IBM Cloud Pak for Security
- Weak cryptography or TLS
Not analysed yet 3 Mar 2024
CVE-2021-39090 CVE record

CVSS 5.9 Medium

IBM Cloud Pak for Security information disclosure
- IBM Cloud Pak for Security
- Weak cryptography or TLS
Not analysed yet 29 Feb 2024
CVE-2023-50951 CVE record

CVSS 4.0 Medium

IBM QRadar Suite information disclosure
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- Information disclosure
Not analysed yet 17 Feb 2024
CVE-2024-22337 CVE record

CVSS 5.1 Medium

IBM QRadar Suite information disclosure
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- Information disclosure
Not analysed yet 17 Feb 2024
CVE-2024-22336 CVE record

CVSS 5.1 Medium

IBM QRadar Suite information disclosure
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- Information disclosure
Not analysed yet 17 Feb 2024
CVE-2024-22335 CVE record

CVSS 5.1 Medium

IBM QRadar Suite information disclosure
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- Information disclosure
Not analysed yet 17 Feb 2024
CVE-2022-36777 CVE record

CVSS 4.3 Medium

IBM Cloud Pak for Security information disclosure
- IBM Cloud Pak for Security
- IBM QRadar Suite Software
- Information disclosure
Not analysed yet 22 Nov 2023
CVE-2023-30993 CVE record

CVSS 6.8 Medium

IBM Cloud Pak for Security information disclosure
- IBM Cloud Pak for Security
- Information disclosure
Not analysed yet 27 Jun 2023
CVE-2021-39089 CVE record

CVSS 4.3 Medium

IBM Cloud Pak for Security information disclosure
- IBM Cloud Pak for Security
- Information disclosure
Not analysed yet 20 Jan 2023
CVE-2021-39011 CVE record

CVSS 4.2 Medium

IBM Cloud Pak for Security information disclosure
- IBM Cloud Pak for Security
- Information disclosure
Not analysed yet 20 Jan 2023
CVE-2022-36776 CVE record

CVSS 5.4 Medium

Cross-site scripting in IBM Cloud Pak for Security
- IBM Cloud Pak for Security
- Cross-site scripting (XSS)
Not analysed yet 11 Nov 2022
CVE-2022-38385 CVE record

CVSS 7.1 High

Improper input validation in IBM Cloud Pak for Security
- IBM Cloud Pak for Security
- CWE-20
Not analysed yet 11 Nov 2022
CVE-2022-38387 CVE record

CVSS 7.1 High

OS command injection in IBM Cloud Pak for Security
- IBM Cloud Pak for Security
- Command injection
Not analysed yet 11 Nov 2022
CVE-2021-39013 CVE record

CVSS 4.3 Medium

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.7.2.0, 1.7.1.0…
- IBM Cloud Pak for Security
Not analysed yet 22 Dec 2021
CVE-2021-38911 CVE record

CVSS 4.4 Medium

IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authenticatedl privileged user.
- IBM Cloud Pak for Security
Not analysed yet 19 Oct 2021
CVE-2021-29912 CVE record

CVSS 5.4 Medium

IBM Security Risk Manager on CP4S 1.7.0.0 is vulnerable to cross-site scripting.
- IBM Cloud Pak for Security
Not analysed yet 19 Oct 2021
CVE-2021-29894 CVE record

CVSS 5.9 Medium

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0…
- IBM Cloud Pak for Security
Not analysed yet 30 Sept 2021
CVE-2021-20578 CVE record

CVSS 5.4 Medium

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0…
- IBM Cloud Pak for Security
Not analysed yet 30 Sept 2021
CVE-2021-29697 CVE record

CVSS 4.9 Medium

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0…
- IBM Cloud Pak for Security
Not analysed yet 2 Aug 2021
CVE-2021-29696 CVE record

CVSS 8.0 High

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0…
- IBM Cloud Pak for Security
Not analysed yet 2 Aug 2021
CVE-2021-20541 CVE record

CVSS 3.7 Low

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0…
- IBM Cloud Pak for Security
Not analysed yet 2 Aug 2021
CVE-2021-20540 CVE record

CVSS 2.7 Low

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0…
- IBM Cloud Pak for Security
Not analysed yet 2 Aug 2021
CVE-2021-20539 CVE record

CVSS 5.3 Medium

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0…
- IBM Cloud Pak for Security
Not analysed yet 2 Aug 2021
CVE-2021-20565 CVE record

CVSS 4.6 Medium

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0…
- IBM Cloud Pak for Security
Not analysed yet 14 May 2021
CVE-2021-20564 CVE record

CVSS 5.9 Medium

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0…
- IBM Cloud Pak for Security
Not analysed yet 14 May 2021
CVE-2020-4811 CVE record

CVSS 2.4 Low

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0…
- IBM Cloud Pak for Security
Not analysed yet 14 May 2021
CVE-2021-20577 CVE record

CVSS 4.3 Medium

IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 is vulnerable to cross-site scripting.
- IBM Cloud Pak for Security
Not analysed yet 10 May 2021
CVE-2021-20538 CVE record

CVSS 4.8 Medium

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain…
- IBM Cloud Pak for Security
Not analysed yet 10 May 2021
CVE-2020-4967 CVE record

CVSS 3.1 Low

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through…
- IBM Cloud Pak for Security
Not analysed yet 27 Jan 2021
CVE-2020-4820 CVE record

CVSS 6.1 Medium

IBM Cloud Pak for Security (CP4S) 1.4.0.0 is vulnerable to cross-site scripting.
- IBM Cloud Pak for Security
Not analysed yet 27 Jan 2021
CVE-2020-4816 CVE record

CVSS 5.3 Medium

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote attacker to obtain…
- IBM Cloud Pak for Security
Not analysed yet 27 Jan 2021
CVE-2020-4815 CVE record

CVSS 5.3 Medium

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote user to obtain sensitive…
- IBM Cloud Pak for Security
Not analysed yet 27 Jan 2021
CVE-2020-4628 CVE record

CVSS 5.3 Medium

IBM Cloud Pak for Security: IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to…
- IBM Cloud Pak for Security
Not analysed yet 27 Jan 2021
CVE-2020-4696 CVE record

CVSS 5.3 Medium

IBM Cloud Pak for Security: IBM Cloud Pak for Security 1.3.0.1(CP4S) does not invalidate session after logout which…
- IBM Cloud Pak for Security
Not analysed yet 30 Nov 2020
CVE-2020-4627 CVE record

CVSS 6.5 Medium

IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection.
- IBM Cloud Pak for Security
Not analysed yet 30 Nov 2020
CVE-2020-4626 CVE record

CVSS 5.0 Medium

IBM Cloud Pak for Security: IBM Cloud Pak for Security 1.3.0.1 (CP4S) could reveal sensitive information about the…
- IBM Cloud Pak for Security
Not analysed yet 30 Nov 2020
CVE-2020-4625 CVE record

CVSS 4.0 Medium

IBM Cloud Pak for Security: IBM Cloud Pak for Security 1.3.0.1(CP4S) could allow a remote attacker to obtain…
- IBM Cloud Pak for Security
Not analysed yet 30 Nov 2020
CVE-2020-4624 CVE record

CVSS 3.7 Low

IBM Cloud Pak for Security: IBM Cloud Pak for Security 1.3.0.1 (CP4S) uses weaker than expected cryptographic…
- IBM Cloud Pak for Security
Not analysed yet 30 Nov 2020