Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cloud_pak_for_multicloud_management_monitoring:2.3.0:fixpack4:*:*:*:*:*:*

part: a version: 2.3.0 update: fixpack4

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCloud Pak For Multicloud Management Monitoring (63394978-0f63-5159-90fd-babd95b9828e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-43191 vulnerable 2026-06-08 06:45:49.839839 IBM ManageIQ command execution
HIGH (7.2)
IBM ManageIQ could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted yaml file request.
Published: 2024-09-26T15:07:48.440Z
Updated: 2024-09-26T15:51:05.670Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46175 vulnerable 2026-06-08 06:12:44.316621 IBM Cloud Pak for Multicloud Management information disclosure
MEDIUM (4.4)
IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which can be read by a privileged user.
Published: 2024-09-26T13:24:16.129Z
Updated: 2024-09-26T13:40:25.441Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42438 vulnerable 2026-06-08 05:49:29.940424 IBM Cloud Pak for Multicloud Management Monitoring privilege escalation
HIGH (7.5)
IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths. IBM X-Force ID: 238210.
Published: 2023-02-08T18:59:02.733Z
Updated: 2025-03-25T13:50:55.183Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38941 vulnerable 2026-06-08 05:33:48.612650 Details available
MEDIUM (5.3)
IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. IBM X-Force ID: 211048.
Published: 2022-06-30T16:50:16.381Z
Updated: 2024-09-16T20:48:17.471Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.