IBM Cloud Pak System
19 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for IBM Cloud Pak System, a product in the databases space. Use it to gauge the current risk picture and drill into individual advisories.
IBM Cloud Pak System CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 5 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 2 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 19 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical6
- High6
- Medium7
Latest CVEs
The 15 most recently published vulnerabilities affecting IBM Cloud Pak System.
- CVE-2025-2895IBM Cloud Pak System HTML injection5.4
- CVE-2023-38007IBM Cloud Pak System HTML injection5.4
- CVE-2023-38713IBM Cloud Pak System information disclosure5.3
- CVE-2023-38714IBM Cloud Pak System information disclosure5.3
- CVE-2023-38013IBM Cloud Pak System information disclosure5.3
- CVE-2023-38012IBM Cloud Pak System directory traversal5.3
- CVE-2023-38716IBM Cloud Pak System information disclosure5.3
- CVE-2021-3999A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input...7.8
- CVE-2022-0778Infinite loop in BN_mod_sqrt() reachable when parsing certificates7.5
- CVE-2022-23852Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.9.8
- CVE-2022-23218The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which ma...9.8
- CVE-2022-23219The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which m...9.8
- CVE-2022-22822addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8
- CVE-2021-46143In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.8.1
- CVE-2021-45960In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing me...8.8
Product grouping is registry-driven, with AI assist and human review. How it works