IBM Cloud Pak for Data 4.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:cloud_pak_for_data:4.0:-:*:*:*:*:*:*
part: a version: 4.0 update: -
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Cloud Pak For Data (441730ee-ffed-5b48-8076-dad8909ec64d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0719 |
vulnerable | 2026-06-08 07:02:25.243224 |
IBM Cloud Pak for Data cross-site scripting
MEDIUM (6.1)
IBM Cloud Pak for Data 4.0.0 through 4.8.5 and 5.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-02-26T14:04:04.974Z
Updated: 2025-02-26T14:20:27.526Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27877 |
vulnerable | 2026-06-08 05:57:42.365591 |
IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure
MEDIUM (5.3)
IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905.
Published: 2023-07-19T01:31:33.738Z
Updated: 2024-10-28T15:03:51.139Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26026 |
vulnerable | 2026-06-08 05:57:37.877454 |
IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure
MEDIUM (5.3)
Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896.
Published: 2023-07-19T01:36:50.900Z
Updated: 2024-10-25T17:34:31.868Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26023 |
vulnerable | 2026-06-08 05:57:37.872827 |
IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure
MEDIUM (6.5)
Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896.
Published: 2023-07-19T01:34:32.650Z
Updated: 2024-10-21T13:04:45.326Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22353 |
not_vulnerable | 2026-06-08 05:40:53.622513 |
Details available
MEDIUM (5.3)
IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.
Published: 2022-03-14T17:00:25.751Z
Updated: 2024-09-16T16:22:27.140Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.