CVE-2023-38375Medium 6.1IBM Cloud Pak System Cross-Site Scripting0.2%
CVE-2026-3161Medium 5.9IBM Cloud Pak System Risky Cryptographic Algorithm0.2%
CVE-2026-3295High 7.4IBM Cloud Pak System Cross-Site Scripting0.2%
CVE-2026-4418Medium 5.4IBM Cloud Pak System HTML Injection0.2%
CVE-2026-13463High 7.5Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability []0.4%
CVE-2023-38005Medium 4.3Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]0.2%
CVE-2023-38265Medium 5.3Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]0.2%
CVE-2023-38281Medium 5.3Multiple Vulnerabilities in IBM Cloud Pak System0.3%
CVE-2023-38017Medium 5.3Multiple Vulnerabilities in IBM Cloud Pak System0.3%
CVE-2023-38010Medium 5.3Multiple Vulnerabilities in IBM Cloud Pak System0.3%
CVE-2025-2895Medium 5.4IBM Cloud Pak System HTML injection0.3%
CVE-2023-38007Medium 5.4IBM Cloud Pak System HTML injection0.3%
CVE-2023-38272Medium 5.9IBM Cloud Pak System information disclosure0.4%
CVE-2023-37405Medium 6.5IBM Cloud Pak System information disclosure0.2%
CVE-2023-38271Medium 4.3IBM Cloud Pak System information disclosure0.3%
CVE-2023-38713Medium 5.3IBM Cloud Pak System information disclosure0.3%
CVE-2023-38714Medium 5.3IBM Cloud Pak System information disclosure0.3%
CVE-2023-38013Medium 5.3IBM Cloud Pak System information disclosure0.3%
CVE-2023-38012Medium 5.3IBM Cloud Pak System directory traversal0.5%
CVE-2023-38716Medium 5.3IBM Cloud Pak System information disclosure0.3%
CVE-2023-38273High 7.5IBM Cloud Pak System information disclosure0.7%
CVE-2021-20479Medium 5.9IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 1974980.7%
CVE-2021-20478Medium 4.0IBM Cloud Pak System 2.3 could allow a local user in some situations to view the artifacts of another user in self service console. IBM X-Force ID: 197497.0.2%
CVE-2020-4928Medium 6.7IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files. By intercepting the request and modifying the file extention, the attacker could execute arbitrary code on t0.4%
CVE-2020-4919Medium 4.7IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to impersonate another user on the system. IBM X-Force ID: 191395.0.6%
CVE-2020-4918Low 2.3IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager. IBM X0.3%
CVE-2020-4917Medium 4.3IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-0.4%
CVE-2020-4916Medium 5.5IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le0.7%
CVE-2020-4913Medium 4.4IBM Cloud Pak System 2.3 could reveal credential information in the HTTP response to a local privileged user. IBM X-Force ID: 191288.0.3%
CVE-2020-4912Medium 4.7IBM Cloud Pak System 2.3 Self Service Console could allow a privilege escalation by capturing the user request URL when logged in as a privileged user. IBM X-Force ID: 191287.1.1%
CVE-2020-4910Medium 4.8IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le0.6%
CVE-2020-4909Medium 4.8IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le0.6%