Skip to content
OpenAdvisories

Product · IBM

Cloud Pak System

40 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.4
    CVE-2026-3295

    IBM Cloud Pak System Cross-Site Scripting

    IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly sanitized or HTML‑encoded before being stored and rendered. An authenticated attacker could exploit this vulnerability by entering…

    IBM Cloud Pak System
  • High 7.5
    CVE-2026-13463

    Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability []

    IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files.

    IBM Cloud Pak System
  • High 7.5
    CVE-2023-38273

    IBM Cloud Pak System information disclosure

    IBM Cloud Pak System 2.3.1.1, 2.3.2.0, and 2.3.3.7 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 260733.

    IBM Cloud Pak System
  • High 7.0
    CVE-2019-4521

    Platform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection. A remote attacker could…

    IBM Cloud Pak System