Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cloud_pak_for_security:1.7.1.0:*:*:*:*:*:*:*

part: a version: 1.7.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCloud Pak For Security (3c9069b5-56b5-5daf-9be4-22436134ca4e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-39013 vulnerable 2026-06-08 05:33:48.755426 Details available
MEDIUM (4.3)
IBM Cloud Pak for Security (CP4S) 1.7.2.0, 1.7.1.0, and 1.7.0.0 could allow an authenticated user to obtain sensitive information in HTTP responses that could be used in further attacks against the system. IBM X-Force ID: 213651.
Published: 2021-12-22T16:50:09.950Z
Updated: 2024-09-17T00:22:03.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29894 vulnerable 2026-06-08 05:31:27.202877 Details available
MEDIUM (5.9)
IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 207320.
Published: 2021-09-30T16:20:18.227Z
Updated: 2024-09-16T20:52:47.440Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29697 vulnerable 2026-06-08 05:31:26.818314 Details available
MEDIUM (4.9)
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to obtain sensitive information through HTTP requests that could be used in further attacks against the system.
Published: 2021-08-02T16:35:26.726Z
Updated: 2024-09-16T20:07:15.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29696 vulnerable 2026-06-08 05:31:26.817703 Details available
HIGH (8)
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
Published: 2021-08-02T16:35:25.142Z
Updated: 2024-09-17T01:56:08.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20578 vulnerable 2026-06-08 05:29:09.489268 Details available
MEDIUM (5.4)
IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized actions due to improper or missing authentication controls. IBM X-Force ID: 199282.
Published: 2021-09-30T16:20:16.598Z
Updated: 2024-09-17T00:31:00.175Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20541 vulnerable 2026-06-08 05:29:09.442168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20540 vulnerable 2026-06-08 05:29:09.441568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20539 vulnerable 2026-06-08 05:29:09.440849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.