Latest ibm cloud pak system Vulnerabilities

● IBM-7105357

IBM Cloud Pak System<=2.3.1.1, 2.3.2.0 (power)

IBM Cloud Pak System Software Suite<=2.3.3.7 (power)

IBM Cloud Pak System<=2.3.3.0 - 2.3.3.6 (intel)

IBM Cloud Pak System Software Suite<=2.3.3.0 - 2.3.3.6 (intel)

● CVE-2023-38273

IBM Cloud Pak System information disclosure

IBM Cloud Pak System>=2.3.3.0<=2.3.3.6

IBM Cloud Pak System=2.3.1.1

IBM Cloud Pak System=2.3.2.0

IBM Cloud Pak System=2.3.3.7

IBM Cloud Pak System<=2.3.1.1, 2.3.2.0 (power)

IBM Cloud Pak System Software Suite<=2.3.3.7 (power)

and 2 more

● CVE-2020-4914

IBM Cloud Pak System Suite 2.3.3.0 through 2.3.3.5 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 191290.

IBM Cloud Pak System>=2.3.3.0<2.3.3.6

IBM Cloud Pak System Software Suite<=2.3.3.0

IBM Cloud Pak System Software Suite<=2.3.3.5

IBM Cloud Pak System Software Suite<=2.3.3.0 - 2.3.3.5

IBM Cloud Pak System<=2.3

● IBM-6967181

IBM Cloud Pak System Software Suite<=2.3.3.0 - 2.3.3.5

IBM Cloud Pak System<=2.3

● IBM-6562263

IBM Cloud Pak System<=V2.3.0 - V2.3.3.3 Interim Fix 1

● CVE-2021-20479

IBM Cloud Pak System>=2.3.0.0<2.3.3.4

IBM Cloud Pak System<=V2.3.0 - V2.3.3.3 Interim Fix 1

● IBM-6473065

IBM Cloud Pak System<=V2.3.3.0 - V2.3.3.3

● CVE-2021-36090

A flaw was found in apache-commons-compress. When reading a specially crafted ZIP archive, Compress can allocate large amounts of memory that leads to an out-of-memory error for small inputs. This fla...

redhat/apache-commons-compress<0:1.21-1.2.el8e

IBM Cloud Pak System<=V2.3.0 - V2.3.3.3 Interim Fix 1

redhat/apache-commons-compress<1.21

Apache Commons Compress>=1.0<1.21

Oracle Banking Apis>=18.1<=18.3

Oracle Banking Apis=19.1

and 69 more

● IBM-6393554

IBM Cloud Pak System<=2.3

● CVE-2020-4928

IBM Cloud Pak System could allow a local privileged attacker to upload arbitrary files. By intercepting the request and modifying the file extention, the attacker could execute arbitrary code on the s...

IBM Cloud Pak System<=2.3

IBM Cloud Pak System>=2.3.0.0<2.3.3.3

● CVE-2020-4912

IBM Cloud Pak System Self Service Console could allow a privilege escalation by capturing the user request URL when logged in as a privileged user.

IBM Cloud Pak System<=2.3

IBM Cloud Pak System>=2.3.0.0<2.3.3.3

● CVE-2020-4918

IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager. IBM X...

IBM Cloud Pak System>=2.3.0.0<2.3.3.3

IBM Cloud Pak System<=2.3

● CVE-2020-4916

IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadin...

IBM Cloud Pak System<=2.3

IBM Cloud Pak System>=2.3.0.0<2.3.3.3

● CVE-2020-4913

IBM Cloud Pak System 2.3 could reveal credential information in the HTTP response to a local privileged user. IBM X-Force ID: 191288.

IBM Cloud Pak System>=2.3.0.0<2.3.3.3

IBM Cloud Pak System<=2.3

● CVE-2020-4910

IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le...

IBM Cloud Pak System>=2.3.0.0<2.3.3.3

IBM Cloud Pak System<=2.3

● CVE-2020-4917

IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-...

IBM Cloud Pak System>=2.3.0.0<2.3.3.3

IBM Cloud Pak System<=2.3

● CVE-2020-4909

IBM Cloud Pak System>=2.3.0.0<2.3.3.3

IBM Cloud Pak System<=2.3

● CVE-2020-4919

IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to impersonate another user on the system. IBM X-Force ID: 191395.

IBM Cloud Pak System>=2.3.0.0<2.3.3.3

IBM Cloud Pak System<=2.3

● CVE-2019-4095

IBM Pure Application System is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.