Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: IBM Cloud Pak System — ibm.com/support/pages/node/7290183 Clear all filters
TI-2023-30889 CVE-2023-38375 · GHSA-qcpj-652c-hcfv

Cross-site scripting in IBM Cloud Pak System Web UI

Priority LOW 27

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00194 Published 2026-10-19 No fix listed CWE-79
TI-2026-76514 CVE-2026-3161 · GHSA-2pff-h2q8-4jc4

Risky cryptographic algorithm in IBM Cloud Pak System

Priority LOW 32

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00171 Published 2026-10-19 No fix listed CWE-327
TI-2026-76515 CVE-2026-3295 · GHSA-g698-cvpw-9x59

Stored cross-site scripting in IBM Cloud Pak System

Priority LOW 32

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00177 Published 2026-10-19 No fix listed CWE-79
TI-2026-76520 CVE-2026-4418 · GHSA-vj5c-2vfj-v63r

HTML injection in IBM Cloud Pak System

Priority LOW 24

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00177 Published 2026-10-19 No fix listed CWE-80