GCVE - cpe:2.3:a:ibm:cloud_pak_for_data:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cloud_pak_for_data:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Cloud Pak For Data (`441730ee-ffed-5b48-8076-dad8909ec64d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-0719`	vulnerable	2026-06-08 07:02:25.246750	IBM Cloud Pak for Data cross-site scripting MEDIUM (6.1) IBM Cloud Pak for Data 4.0.0 through 4.8.5 and 5.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Published: 2025-02-26T14:04:04.974Z Updated: 2025-02-26T14:20:27.526Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/7184173	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-38714`	not_vulnerable	2026-06-08 05:47:16.930665	IBM DataStage on Cloud Pak for Data information disclosure MEDIUM (4.9) IBM DataStage on Cloud Pak for Data 4.0.6 to 4.5.2 stores sensitive credential information that can be read by a privileged user. IBM X-Force ID: 235060. Published: 2024-02-12T17:41:24.984Z Updated: 2025-03-18T19:56:08.800Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6618039 https://exchange.xforce.ibmcloud.com/vulnerabilities/235060	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36769`	vulnerable	2026-06-08 05:46:07.724203	IBM Cloud Pak for Data file upload HIGH (7.2) IBM Cloud Pak for Data 4.5 and 4.6 could allow a privileged user to upload malicious files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 232034. Published: 2023-04-26T02:52:02.470Z Updated: 2025-01-31T16:13:49.538Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6980959 https://exchange.xforce.ibmcloud.com/vulnerabilities/232034	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38899`	vulnerable	2026-06-08 05:33:48.523403	Details available MEDIUM (4.4) IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information. IBM X-Force ID: 209575. Published: 2021-09-20T16:45:59.667Z Updated: 2024-09-16T20:07:08.007Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6490435 https://exchange.xforce.ibmcloud.com/vulnerabilities/209575	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20486`	vulnerable	2026-06-08 05:29:09.308613	Details available MEDIUM (5.3) IBM Cloud Pak for Data 3.0 could allow an authenticated user to obtain sensitive information when installed with additional plugins. IBM X-Force ID: 197668. Published: 2021-05-26T16:20:17.082Z Updated: 2024-09-16T21:04:23.819Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6456033 https://exchange.xforce.ibmcloud.com/vulnerabilities/197668	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.