Vendors / IBM Records 9712 All Threatist records
Exploited (KEV) 11
CVSS critical 986
CVSS high 2776
Exploited now IBM records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
IBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges due to improper application permissions.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01065 · Published 2021-07-13 · No fix listed CWE-732
Priority LOW 35
IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data stored in memory.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0125 · Published 2021-07-13 · No fix listed
Priority LOW 34
IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0071 · Published 2021-07-13 · No fix listed CWE-326
Priority LOW 28
IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00674 · Published 2021-07-13 · No fix listed CWE-326
Priority LOW 25
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-13 · No fix listed CWE-79
Priority LOW 25
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-13 · No fix listed CWE-79
Priority LOW 25
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00498 · Published 2021-07-13 · No fix listed CWE-79
Priority LOW 25
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-13 · No fix listed CWE-79
Priority LOW 25
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-13 · No fix listed CWE-79
Priority LOW 25
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-13 · No fix listed CWE-79
Priority LOW 25
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-13 · No fix listed CWE-79
Priority LOW 22
IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00982 · Published 2021-07-13 · No fix listed CWE-209
Open these records in search → All records by CVSS severity
986 2776 5270 679 1
THREATIST.IORead the docs