IBM Cloud Pak for Security (CP4S) 1.5.0.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cloud_pak_for_security:1.5.0.0:*:*:*:*:*:*:*

part: a version: 1.5.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCloud Pak For Security (3c9069b5-56b5-5daf-9be4-22436134ca4e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-29697 vulnerable 2026-06-08 05:31:26.818214 Details available
MEDIUM (4.9)
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to obtain sensitive information through HTTP requests that could be used in further attacks against the system.
Published: 2021-08-02T16:35:26.726Z
Updated: 2024-09-16T20:07:15.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29696 vulnerable 2026-06-08 05:31:26.814142 Details available
HIGH (8)
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
Published: 2021-08-02T16:35:25.142Z
Updated: 2024-09-17T01:56:08.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20577 vulnerable 2026-06-08 05:29:09.488858 Details available
MEDIUM (4.3)
IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199281.
Published: 2021-05-10T16:20:17.399Z
Updated: 2024-09-17T00:16:35.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20565 vulnerable 2026-06-08 05:29:09.476894 Details available
MEDIUM (4.6)
IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 199236.
Published: 2021-05-14T16:15:38.687Z
Updated: 2024-09-16T18:34:13.256Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20564 vulnerable 2026-06-08 05:29:09.475288 Details available
MEDIUM (5.9)
IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 199235.
Published: 2021-05-14T16:15:38.024Z
Updated: 2024-09-16T19:01:41.655Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20541 vulnerable 2026-06-08 05:29:09.442073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20540 vulnerable 2026-06-08 05:29:09.441463 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20539 vulnerable 2026-06-08 05:29:09.436933 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20538 vulnerable 2026-06-08 05:29:09.435877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4811 vulnerable 2026-06-08 05:26:41.006220 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.