IBM Cloud Pak for Security

CVE-2025-25020 Medium 6.5 IBM QRadar Suite Software and IBM Cloud Pak for Security improper input validation 0.4%
CVE-2025-1334 Medium 4.0 IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure 0.2%
CVE-2025-25021 High 7.2 IBM QRadar Suite Software and IBM Cloud Pak for Security code injection 0.7%
CVE-2025-25022 Critical 9.6 IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure 0.3%
CVE-2025-25019 Medium 4.8 IBM QRadar Suite Software and IBM Cloud Pak for Security session fixation 0.3%
CVE-2023-47728 Medium 6.5 IBM QRadar Suite Software information disclosure 0.5%
CVE-2024-25024 Medium 5.5 IBM QRadar Suite Software information disclosure 0.1%
CVE-2024-28799 Medium 5.6 IBM QRadar Suite Software information disclosure 0.3%
CVE-2022-38382 Medium 4.7 IBM Cloud Pak for Security session fixation 0.3%
CVE-2024-25023 Medium 5.5 IBM QRadar Suite Software information disclosure 0.1%
CVE-2022-38383 Medium 4.0 IBM Cloud Pak for Security information disclosure 0.2%
CVE-2023-47726 High 7.1 IBM QRadar Suite improper input validation 0.4%
CVE-2023-47727 Medium 4.3 IBM QRadar Suite Software file manipulation 0.3%
CVE-2022-38386 Medium 5.9 IBM Cloud Pak for Security information disclosure 0.5%
CVE-2023-47731 Medium 5.4 IBM QRadar Suite Software cross-site scripting 0.3%
CVE-2024-28782 Medium 6.3 IBM QRadar Suite Software information disclosure 0.4%
CVE-2024-22355 Medium 5.9 IBM QRadar Suite information dislosure 0.4%
CVE-2023-47742 Medium 5.9 IBM QRadar Suite information dislosure 0.2%
CVE-2021-39090 Medium 5.9 IBM Cloud Pak for Security information disclosure 0.4%
CVE-2023-50951 Medium 4.0 IBM QRadar Suite information disclosure 0.4%
CVE-2024-22337 Medium 5.1 IBM QRadar Suite information disclosure 0.2%
CVE-2024-22336 Medium 5.1 IBM QRadar Suite information disclosure 0.2%
CVE-2024-22335 Medium 5.1 IBM QRadar Suite information disclosure 0.2%
CVE-2022-36777 Medium 4.3 IBM Cloud Pak for Security information disclosure 0.6%
CVE-2023-30993 Medium 6.8 IBM Cloud Pak for Security information disclosure 0.6%
CVE-2021-39089 Medium 4.3 IBM Cloud Pak for Security information disclosure 0.7%
CVE-2021-39011 Medium 4.2 IBM Cloud Pak for Security information disclosure 0.6%
CVE-2022-36776 Medium 5.4 IBM Cloud Pak for Security (CP4S) 1.10.0.0 79and 1.10.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the inte 0.4%
CVE-2022-38385 High 7.1 IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to improper input validation. 0.6%
CVE-2022-38387 High 7.1 IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force 1.0%
CVE-2021-39013 Medium 4.3 IBM Cloud Pak for Security (CP4S) 1.7.2.0, 1.7.1.0, and 1.7.0.0 could allow an authenticated user to obtain sensitive information in HTTP responses that could be used in further attacks against the sy 0.8%
CVE-2021-38911 Medium 4.4 IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authenticatedl privileged user. IBM X-Force ID: 209940. 0.5%
CVE-2021-29912 Medium 5.4 IBM Security Risk Manager on CP4S 1.7.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionali 0.5%
CVE-2021-29894 Medium 5.9 IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X- 0.7%
CVE-2021-20578 Medium 5.4 IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized actions due to improper or missing authentication controls. IBM X-Force ID: 199 1.0%
CVE-2021-29697 Medium 4.9 IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to obtain sensitive information through HTTP requests that could 1.4%
CVE-2021-29696 High 8.0 IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a speciall 2.5%
CVE-2021-20541 Low 3.7 IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information coul 0.9%
CVE-2021-20540 Low 2.7 IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information coul 0.9%
CVE-2021-20539 Medium 5.3 IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information coul 0.9%
CVE-2021-20565 Medium 4.6 IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an un 0.8%
CVE-2021-20564 Medium 5.9 IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Tr 0.9%
CVE-2020-4811 Low 2.4 IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to inject inject malicious data using a specially crafted HTTP request due to improper i 0.7%
CVE-2021-20577 Medium 4.3 IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended 0.6%
CVE-2021-20538 Medium 4.8 IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive information or perform actions they should not have access to due to incorrect authorization mechanisms. IB 0.7%
CVE-2020-4967 Low 3.1 IBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through HTTP headers which could be used in further attacks against the system. IBM X-Force ID: 192425. 0.8%
CVE-2020-4820 Medium 6.1 IBM Cloud Pak for Security (CP4S) 1.4.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionali 0.7%
CVE-2020-4816 Medium 5.3 IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could expl 1.2%
CVE-2020-4815 Medium 5.3 IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote user to obtain sensitive information from HTTP response headers that could be used in further attacks against the system. 1.3%
CVE-2020-4628 Medium 5.3 IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information 1.3%