Priority LOW 22
IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00982 · Published 2021-07-13 · No fix listed CWE-209
Priority MEDIUM 40
IBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges due to improper application permissions.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01065 · Published 2021-07-13 · No fix listed CWE-732
Priority LOW 35
IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data stored in memory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0125 · Published 2021-07-13 · No fix listed
Priority LOW 28
IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00674 · Published 2021-07-13 · No fix listed CWE-326
Priority LOW 25
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-13 · No fix listed CWE-79
Priority LOW 25
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-13 · No fix listed CWE-79
Priority LOW 25
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00498 · Published 2021-07-13 · No fix listed CWE-79
Priority LOW 25
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-13 · No fix listed CWE-79
Priority LOW 25
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-13 · No fix listed CWE-79
Priority LOW 25
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-13 · No fix listed CWE-79
Priority LOW 25
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-13 · No fix listed CWE-79
Priority LOW 34
IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0071 · Published 2021-07-13 · No fix listed CWE-326
THREATIST.IORead the docs