Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cloud_pak_system:2.3.3.7:*:*:*:*:*:*:*

part: a version: 2.3.3.7 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCloud Pak System (b3e4c055-8703-59c7-85ff-8cd9655af70a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2895 vulnerable 2026-06-08 07:16:58.613892 IBM Cloud Pak System HTML injection
MEDIUM (5.4)
IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, 2.3.4.1, and 2.3.4.1 iFix1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Published: 2025-06-30T14:39:43.041Z
Updated: 2025-08-24T11:36:47.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38716 vulnerable 2026-06-08 06:08:18.689100 IBM Cloud Pak System information disclosure
MEDIUM (5.3)
IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could disclose sensitive information about the system that could aid in further attacks against the system.
Published: 2025-01-25T13:48:45.716Z
Updated: 2025-01-27T17:04:29.726Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38714 vulnerable 2026-06-08 06:08:18.688396 IBM Cloud Pak System information disclosure
MEDIUM (5.3)
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could disclose sensitive information about the system that could aid in further attacks against the system.
Published: 2025-01-25T13:55:54.926Z
Updated: 2025-01-27T17:01:26.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38713 vulnerable 2026-06-08 06:08:18.682668 IBM Cloud Pak System information disclosure
MEDIUM (5.3)
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could disclose sensitive information about the system that could aid in further attacks against the system.
Published: 2025-01-25T13:56:16.547Z
Updated: 2025-01-27T14:46:11.289Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38273 vulnerable 2026-06-08 06:08:17.524328 IBM Cloud Pak System information disclosure
HIGH (7.5)
IBM Cloud Pak System 2.3.1.1, 2.3.2.0, and 2.3.3.7 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 260733.
Published: 2024-02-02T14:26:10.089Z
Updated: 2024-08-02T17:39:12.077Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38272 vulnerable 2026-06-08 06:08:17.518337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38271 vulnerable 2026-06-08 06:08:17.513092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38265 vulnerable 2026-06-08 06:08:17.503260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38013 vulnerable 2026-06-08 06:08:16.704477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38012 vulnerable 2026-06-08 06:08:16.703656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38005 vulnerable 2026-06-08 06:08:16.682696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37405 vulnerable 2026-06-08 06:08:15.248507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.