Skip to content
OpenAdvisories

Product · IBM

Cloud Private

15 known vulnerabilities.

Cloud Private at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Medium 5.4
    CVE-2019-4120

    IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit…

    IBM Cloud Private
  • Medium 4.3
    CVE-2019-4117

    IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute …

    IBM Cloud Private
  • Medium 4.4
    CVE-2019-4284

    IBM Cloud Private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain sensitive OIDC token th…

    IBM Cloud Private
  • Medium 4.9
    CVE-2019-4415

    IBM Cloud Private 3.1.1 and 3.1.2 could allow a local user to obtain elevated privileges due to improper security conte…

    IBM Cloud Private
  • Medium 5.9
    CVE-2019-4439

    IBM Cloud Private 3.1.0, 3.1.1, and 3.1.2 does not invalidate session after logout which could allow a local user to im…

    IBM Cloud Private
  • Medium 5.5
    CVE-2019-4116

    IBM Cloud Private 2.1.0, 3.1.0, and 3.1.1 could disclose highly sensitive information in installer logs that could be u…

    IBM Cloud Private
  • Medium 4.3
    CVE-2019-4142

    IBM Cloud Private 2.1.0, 3.1.0, 3.1.1, and 3.1.2 is vulnerable to cross-site request forgery which could allow an attac…

    IBM Cloud Private
  • Low 3.1
    CVE-2019-4119

    IBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP proxy to not only cluster…

    IBM Cloud Private
  • Medium 5.5
    CVE-2019-4143

    The IBM Cloud Private Key Management Service (IBM Cloud Private 3.1.1 and 3.1.2) could allow a local user to obtain sen…

    IBM Cloud Private
  • Medium 5.4
    CVE-2018-1943

    IBM Cloud Private 3.1.0 and 3.1.1 is vulnerable to HTTP HOST header injection, caused by improper validation of input. …

    IBM Cloud Private
  • Medium 6.8
    CVE-2018-1939

    IBM Cloud Private 3.1.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By pe…

    IBM Cloud Private
  • Medium 4.4
    CVE-2018-1938

    IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensitive unencrypt…

    IBM Cloud Private
  • Medium 4.4
    CVE-2018-1937

    IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensitive unencrypt…

    IBM Cloud Private
  • Medium 4.1
    CVE-2018-1843

    The Identity and Access Management (IAM) services (IBM Cloud Private 3.1.0) do not use a secure channel, such as SSL, t…

    IBM Cloud Private
  • Medium 6.2
    CVE-2018-1841

    IBM Cloud Private 2.1.0 could allow a local user to obtain the CA Private Key due to it being world readable in boot/ma…

    IBM Cloud Private