Advisories · Technology

IBM Cloud Pak System.

Every CVE that names IBM Cloud Pak System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-38375 CVE record

CVSS 6.1 Medium

IBM Cloud Pak System Cross-Site Scripting
- IBM Cloud Pak System
- Cross-site scripting (XSS)
Not analysed yet 19 Oct 2026
CVE-2026-3161 CVE record

CVSS 5.9 Medium

IBM Cloud Pak System Risky Cryptographic Algorithm
- IBM Cloud Pak System
- Weak cryptography or TLS
Not analysed yet 19 Oct 2026
CVE-2026-3295 CVE record

CVSS 7.4 High

IBM Cloud Pak System Cross-Site Scripting
- IBM Cloud Pak System
- Cross-site scripting (XSS)
Not analysed yet 19 Oct 2026
CVE-2026-4418 CVE record

CVSS 5.4 Medium

IBM Cloud Pak System HTML Injection
- IBM Cloud Pak System
- Cross-site scripting (XSS)
Not analysed yet 19 Oct 2026
CVE-2026-13463 CVE record

CVSS 7.5 High

Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability []
- IBM Cloud Pak System
- Hard-coded credentials
Not analysed yet 28 Jul 2026
CVE-2023-38005 CVE record

CVSS 4.3 Medium

Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]
- IBM Cloud Pak System
- Broken access control
Not analysed yet 17 Feb 2026
CVE-2023-38265 CVE record

CVSS 5.3 Medium

Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]
- IBM Cloud Pak System
- CWE-548
Not analysed yet 17 Feb 2026
CVE-2023-38281 CVE record

CVSS 5.3 Medium

Multiple Vulnerabilities in IBM Cloud Pak System
- IBM Cloud Pak System
- IBM OS Image for Red Hat Linux Systems
- Information disclosure
Not analysed yet 4 Feb 2026
CVE-2023-38017 CVE record

CVSS 5.3 Medium

Multiple Vulnerabilities in IBM Cloud Pak System
- IBM Cloud Pak System
- IBM OS Image for Red Hat Linux Systems
- Information disclosure
Not analysed yet 4 Feb 2026
CVE-2023-38010 CVE record

CVSS 5.3 Medium

Multiple Vulnerabilities in IBM Cloud Pak System
- IBM Cloud Pak System
- IBM OS Image for Red Hat Linux Systems
- Information disclosure
Not analysed yet 4 Feb 2026
CVE-2025-2895 CVE record

CVSS 5.4 Medium

IBM Cloud Pak System HTML injection
- IBM Cloud Pak System
- Cross-site scripting (XSS)
Not analysed yet 30 Jun 2025
CVE-2023-38007 CVE record

CVSS 5.4 Medium

IBM Cloud Pak System HTML injection
- IBM Cloud Pak System
- Cross-site scripting (XSS)
Not analysed yet 27 Jun 2025
CVE-2023-38272 CVE record

CVSS 5.9 Medium

IBM Cloud Pak System information disclosure
- IBM Cloud Pak System
- CWE-300
Not analysed yet 27 Mar 2025
CVE-2023-37405 CVE record

CVSS 6.5 Medium

IBM Cloud Pak System information disclosure
- IBM Cloud Pak System
- Weak cryptography or TLS
Not analysed yet 27 Mar 2025
CVE-2023-38271 CVE record

CVSS 4.3 Medium

IBM Cloud Pak System information disclosure
- IBM Cloud Pak System
- Information disclosure
Not analysed yet 25 Jan 2025
CVE-2023-38713 CVE record

CVSS 5.3 Medium

IBM Cloud Pak System information disclosure
- IBM Cloud Pak System
- Information disclosure
Not analysed yet 25 Jan 2025
CVE-2023-38714 CVE record

CVSS 5.3 Medium

IBM Cloud Pak System information disclosure
- IBM Cloud Pak System
- Information disclosure
Not analysed yet 25 Jan 2025
CVE-2023-38013 CVE record

CVSS 5.3 Medium

IBM Cloud Pak System information disclosure
- IBM Cloud Pak System
- Information disclosure
Not analysed yet 25 Jan 2025
CVE-2023-38012 CVE record

CVSS 5.3 Medium

IBM Cloud Pak System directory traversal
- IBM Cloud Pak System
- Path traversal
Not analysed yet 25 Jan 2025
CVE-2023-38716 CVE record

CVSS 5.3 Medium

IBM Cloud Pak System information disclosure
- IBM Cloud Pak System
- Information disclosure
Not analysed yet 25 Jan 2025
CVE-2023-38273 CVE record

CVSS 7.5 High

IBM Cloud Pak System information disclosure
- IBM Cloud Pak System
- Authentication bypass
Not analysed yet 2 Feb 2024
CVE-2021-20479 CVE record

CVSS 5.9 Medium

IBM Cloud Pak System: IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected…
- IBM Cloud Pak System
Not analysed yet 9 May 2022
CVE-2021-20478 CVE record

CVSS 4.0 Medium

IBM Cloud Pak System: IBM Cloud Pak System 2.3 could allow a local user in some situations to view the…
- IBM Cloud Pak System
Not analysed yet 20 Jul 2021
CVE-2020-4928 CVE record

CVSS 6.7 Medium

IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files.
- IBM Cloud Pak System
Not analysed yet 4 Jan 2021
CVE-2020-4919 CVE record

CVSS 4.7 Medium

IBM Cloud Pak System: IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an…
- IBM Cloud Pak System
Not analysed yet 4 Jan 2021
CVE-2020-4918 CVE record

CVSS 2.3 Low

IBM Cloud Pak System: IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive…
- IBM Cloud Pak System
Not analysed yet 4 Jan 2021
CVE-2020-4917 CVE record

CVSS 4.3 Medium

IBM Cloud Pak System: IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an…
- IBM Cloud Pak System
Not analysed yet 4 Jan 2021
CVE-2020-4916 CVE record

CVSS 5.5 Medium

IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting.
- IBM Cloud Pak System
Not analysed yet 4 Jan 2021
CVE-2020-4913 CVE record

CVSS 4.4 Medium

IBM Cloud Pak System: IBM Cloud Pak System 2.3 could reveal credential information in the HTTP response to a…
- IBM Cloud Pak System
Not analysed yet 4 Jan 2021
CVE-2020-4912 CVE record

CVSS 4.7 Medium

IBM Cloud Pak System: IBM Cloud Pak System 2.3 Self Service Console could allow a privilege escalation by…
- IBM Cloud Pak System
Not analysed yet 4 Jan 2021
CVE-2020-4910 CVE record

CVSS 4.8 Medium

IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting.
- IBM Cloud Pak System
Not analysed yet 4 Jan 2021
CVE-2020-4909 CVE record

CVSS 4.8 Medium

IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting.
- IBM Cloud Pak System
Not analysed yet 4 Jan 2021
CVE-2019-4521 CVE record

CVSS 7.0 High

Platform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection.
- IBM Cloud Pak System
Not analysed yet 10 Dec 2019
CVE-2019-4095 CVE record

CVSS 5.3 Medium

IBM Cloud Pak System: IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an…
- IBM Cloud Pak System
Not analysed yet 10 Dec 2019
CVE-2019-4468 CVE record

CVSS 5.4 Medium

IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting.
- IBM Cloud Pak System
Not analysed yet 3 Dec 2019
CVE-2019-4467 CVE record

CVSS 5.4 Medium

IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting.
- IBM Cloud Pak System
Not analysed yet 3 Dec 2019
CVE-2019-4465 CVE record

CVSS 4.0 Medium

IBM Cloud Pak System: IBM Cloud Pak System 2.3 and 2.3.0.1 allows web pages to be stored locally which can be…
- IBM Cloud Pak System
Not analysed yet 3 Dec 2019
CVE-2019-4226 CVE record

CVSS 5.4 Medium

IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting.
- IBM Cloud Pak System
Not analysed yet 3 Dec 2019
CVE-2019-4130 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

IBM Cloud Pak System: IBM Cloud Pak System 2.3 and 2.3.0.1 could allow a remote attacker to upload arbitrary…
- IBM Cloud Pak System
Not analysed yet 3 Dec 2019
CVE-2019-4098 CVE record

CVSS 5.4 Medium

IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting.
- IBM Cloud Pak System
Not analysed yet 3 Dec 2019